), 0x0, 0x0) chdir(0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xce00) 21:20:42 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001ac0)={'netdevsim0\x00'}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) (async) recvmmsg(r3, &(0x7f0000001c80)=[{{&(0x7f0000000200)=@qipcrtr, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000000280)=""/162, 0xa2}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001480)=""/154, 0x9a}, 0x9}, {{&(0x7f0000001540)=@nfc_llcp, 0x80, &(0x7f0000000400)=[{&(0x7f00000015c0)=""/165, 0xa5}], 0x1, &(0x7f0000001680)=""/77, 0x4d}, 0xf0d}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001700)=""/71, 0x47}, {&(0x7f0000001780)=""/227, 0xe3}, {&(0x7f0000001880)=""/132, 0x84}, {&(0x7f0000001940)=""/168, 0xa8}, {&(0x7f0000001a00)=""/141, 0x8d}, {&(0x7f0000001ac0)}, {&(0x7f0000001b00)=""/173, 0xad}], 0x7, &(0x7f0000001c40)}, 0x2}], 0x3, 0x0, 0x0) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) (async) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r1, r4, 0x0, 0x10000) (async) sendmmsg(r2, &(0x7f0000006440)=[{{&(0x7f0000001d40)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)="844cb46254547e2f74b2f5a51323c94bfc27ad6af7836d7b226c6ffd6ce6c8ae0936ce4064d1", 0x26}, {&(0x7f0000001dc0)="6582111a87399a6616014f89dcc16c740c0029b0f2957907b2", 0x19}], 0x2, &(0x7f0000001e40)=[{0xb0, 0x112, 0x9, "a2852b89f5271e4f5777561ef7330c22a87b8e8dd3154f1266174be499f203170a010b1dbab4d7bc7e41bc4099a1a5b628d11c7432aa1d670d1af2c860732ef825b284e01c6b0593913b4ad747e24b0d08ad456cd866e4c1eee5cd223aae0c3bd31249e19a66576bc646e9f64c3f67c97b4d7f879c24523b1a3d4d3410acdb5b6dced85c16e637dc823b2bfa231b85e23fe9219097be3d9e9aee"}, {0x100, 0x104, 0x5, "5756bc7a7f3d70f69c048ab9784dd91c5d9f442065d54f2c5671eb3dd6c9cbbea25b7711db621ccafa52d14314d6a9ccec33b425be2ecd055b48f4c56ac1af3a3256cc912ff9551180facae5e0189ea457c22368e30f23485622de7970c6ffa81ebebf0cd9e8875e25054fa43bc8c7496e8f4bb8303343d9cd2dd37964b3fc6571c15ea63ddb5d95f3bc850f985f4bb121c6488491d21bb14c5b794d8dcde0d20f1118371cc066b844e1cb6d5c8dfaf3c010b252de50f9f7f9e5401f3ee0cfab69af8c53e482418d6f2089494afd4c81737a535b8b2ee9b87cec7726632f675722b793add09ae505c8"}, {0x60, 0x1, 0x2, "85f34d71a4265ef4d41a380b47d7d0d62118507240879661268c66da18b5bd04197dd1069620e98a381e6f10e022ae312e3ed74864eb667305b8d621b6b9e05cababd1eaaa8fd191a6f441c6544fdca5"}, {0x28, 0x139, 0x2, "476b101460fae9a6f95bb71ceaeebdd1c8"}, {0xa0, 0x104, 0x0, "dd2d7149cf9ba063753140f2fcc7db9da24046b4f581829b823cc943a1f2bfa25e6eaf7bf61f76af609b3afe87b4f99ed245623ef1f25440dd2614cb6ab00c6ce9e164907c6df28817ef1bdf600ac9346ef02a0608e99bcd6da3c1b9c2f26a2f66db7f7338934b561a07364b37d19d486f835921a29ff87fa499023f1ea0c8c2624578f7eec27562d272e9"}, {0x110, 0x10c, 0xfffffffc, "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"}, {0xb0, 0x1, 0x6, "6e0132ba351d9ec792aadd510b0f943a1075474972e3ce78dd1b328556bbefd267b4f9491f443f4daf1535edf519639722bae65191d34ead899fd2290f4ac7ed76b12c587bf26cbaeace099b5da92ee9af9391864f36221912a85125018641f4f24f7d9fdf1f98c7d41f526dce9e06bb1a5997d5d002aba2c2bf2cef7f35fe191f2fe93c48e5a910ea8024379e7e3e0a1a55e19421571b94762d47"}], 0x498}}, {{&(0x7f0000002300)=@in={0x2, 0x4e23, @multicast1}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002380)="3733fefab2b8158355b2dbb8f2e645b51f33b6e66d22c359cf75c13c58b54ed51aabeb11787a2e722ee04d53f0137f02081fd4fc2205121ea22c3774d68e24f9805432413b5532ca6777fd5cfad0c5c4704a00667e15cb83a74a0fdf37a3b157d4685f7072e3a53735a0ab6023a7b02d784bf4cdc8", 0x75}, {&(0x7f0000002400)="a4ad24f256060c28714d8c8c0726a305fd68cc7966e1eda795d987f8588238ea7d48970aca3d70ff02a49bf966eacf37ef50110265d8b76c2dae800b66bfadb67804343ecaf34e4b7d999a809269bf52b645f3b6a74acd5abc4a1ad312f00786e5a32ee0c86d82965160281c26bbf90605b54a0efb5de17a96f695", 0x7b}], 0x2, &(0x7f0000002500)=[{0x48, 0x0, 0x2, "7fc01619f2bdccde6b8af6d9ac8c6028b7e864b38b88e6cd79a3ee6cf70a76f83c147e9a50735af13a15f7254e417fe499c01f490d4f0790"}, {0xd8, 0x101, 0x4, "35ded56893f6d6ff34560ca0ef37655d0ed40c909fa2c0f6e84ea0659db1327e185846e53b565963177159f5936c5ae811a5eeddd70a75e24443ddc95da3134dc5ab2a59ed2856fb436908bcf7d9d7ffbf788a5a0bd8f048bdf724ab4cd6115b81e78d3213cfbd9918f8eebe4e2f89c06f58381f94d4ec01f1246eb0c9f78394be39be14457635f4ffebe702b6a80f81d0d4558953fa1eb89bd58a320357600348b2637d6b34abedd776777c8e520d54c061aaef099c6c255f80a8b6c9e52beb16f4"}], 0x120}}, {{&(0x7f0000002640)=@in6={0xa, 0x4e22, 0x91c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x80, &(0x7f00000026c0), 0x0, &(0x7f0000002700)=[{0x90, 0x11, 0x5f1, "2024513f0bf8516965bdf7bec84c5a21e616b83c29fa6b0497bb3102d1e12885a4b0fd821a32747aad9d900dcfbe49b52515a8c307924be36751b1ce3eb407feaf29d9d8aeb1abe2427593fcb76658057da4c39197cddcdda51c6d9aa84c5f0047f9287adede4b1cd25853f2bac5b03da257bfbb531e7b129a81"}, {0x38, 0x113, 0x5, "d8266100865d28a29c8592577a25fbe0b306866b72f1daa223dd3d08c2d081cf00000000000000"}, {0x60, 0x114, 0x5, "f014f1fef5ddcfaabcffa31e28366e8142bafe520ff95c5a10dad9d35b7671820d8e8052599a96ff06834871c5e1e9f2923541a05e6a8099329d7211e32e1e8ca08f218f0454700664834a870bb4a7"}], 0x128}}, {{&(0x7f0000002840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @remote}, 0x1, 0x2, 0x0, 0x3}}, 0x80, &(0x7f00000038c0)=[{&(0x7f00000065c0)="aa0e7b5b2b6211501b95b68bc25914829fce7d8b88f7e5ec024299a54213a64e281a2d9644a262bfa14cbef78e2a9876a1692537509fdbfa42033b4336ff7b4f341bce15b079e12c5f835a6870338aa65f20f0d0ad90b3daeb668962a2426ad63c1d6b92bce8970217aca0b5781d50657f65e2356bc8eba60a0df3afc26d3544abe0d517dfc290fa59b86c35a03fbd1246139cc7254c7fdd6a01bd8bbd3c3620252dcf7143bec167317beee5c6dac580e4214c051215119358ab447cb83c71b0c8eba93a45c37132c00aec2cbb2aadb9b85090f8f025d7b6b7ee71982e385f812b242d8a1d848f6a741c259276abe0a7825317ec821efaf053500b90538205ff6e1a08c112bbabc77356725dec7c3b7183ef62b0a235b944a1aed8b7b1d3d2d3f1417ab643f1fbe3bc51ce14c66665e65a206b97fb029a2088eea6e0dda4e2d49f9bd42acf0cd0ddcc242bc1e7e7fcfd6a678f48c34d09eefc1ecc108d86db4eaef26bd437fe428219a06e8811cb1b4384eec84ed4327c93ba7d05a6321ce0e2fd4c42bfdb8735854e566cf3f6bc96af22892bf1e9371583b41f68aad7f8fe7865648eae61a7f1012b764a9bdf211f5ef94b8ed0f7a1e79030dc7e28f1e87c62057779c62a0df5c499df17b66e92df948e06f36b0ac692cf931dbbe32cd64c1408a96581f6e502a76073ed14b7576ecd026edf2bdc2c7decc484f6fe66d222512a90e2983edbb891ef59d453011963eef100504a6270262c60a6f3e46fd0aa59fe247f8440a68a294a0631233ebc887a732851aa864dbb28feb25b5596ed40023560769f7cf8b628915cf44b31294cbaeb0ccdbfef7ee0f39c6ae4bed18271a70ce5c2baaad49e2583b3aa8f69a2087b1c2b7df4cb1dea44c4b245b09bb81a445db2840df136f11ddf797593d0ca92814b2384935fb68278888a9aa2f3710bcbcaf09fdb6acb6475060f88d8de629f5d9856353c3e1581dd67b5d9ecde49f85c7b65dd4bb88ea3fe3dd192f645424efbc7e8ace48e16b4ffd28d8eda24a3d68a74631dd32d9bc0ec8700525c22e9e99227a4708bcd76c36da81effab51ee7894fad2df22ea9e94af67b369bdd82c5306737695f4ad4f6f103d34d68d9072ca2bd99b3a950dd4a3e7374cd3ae0f1c8963aa8f1c6fa9185d4117bb9e5f5b9d3eb49ea0b36e2e16b730442345d2007694c3554d4cf8bd76e80a799cec48cd3628bad4f3cedf7b9b45544a0fc8d03a0cf4f4976f9665f0641840d35c6a5c623b75f9bc97e2c1e6c700a79593c70c16019f7464c94a800f8c57790b85595238b39f321c204d539f2f944f9db44b8289f06f75325a38622974b96194d21f165fb9b04d50042a6d3b80979a7dd63deab8f98d7d4a44b3b27d35225e7c4378c41325244b470aa8886cc49b03563e818496bb52f914a054070b431e750cf0aa2a5420614ef7b652d232bf78efe4f3badecc714c71df89a2d7c4d22fc58ce5dc5ba6548e597dec3dc001a21408f055eb441f6f075832cd07455b9fa33704f230ff855b30920d0f111355acbfbdb505d056b7ca6b41227ecc8f9bac027cb53b21aca422c8be5337e58bd47508d8634defee6131251abb243e3150a1c8a5fa3df337a1e566f31816f3d60c7a8d6246047fa819ebb6e8220e41680ea2efff59f1e85df95703d4d5da68c678c6b4e8d600d18b7b846d8a3feadf3dd1802331ba81721d04fa977c5bf515e337c8993c143e6289b86735cd79cdf9f68a25c55c4dc386d9a3d23eea30ce51a4e96f5202d7f1d7498fa6a7706ecb9e073fee3d248df1e174f6a2861deab37bbfd26fb9248494c8888df37efaa52df291e7b49ddfa4bde09828c5cdc8d6bdd45b6667d06d971fdc229df45056412ad1ccd7b6a2e6967e2f10e7f6f97cbc50a035e01b8b2a37564f52e86eee58367d9bdf89181a68dcb5b021442f5e661401a0b72e305c69301ff8fad8f8293c35e92b92db4386460c3ada7f612b5cfeb5f6ba4b05f38800f2cdec02532a48118334859def69bca51ee564db46579f5589d57d707ec6d234229fc3e9d48e1a592122d3253d61d02d84c3499fc1a43f427e0eca5ad916d56d408252ad29f9ef2eebf25a05474f086c997e9bc5c52e60f1645b8fdfbd8acd5aef15d09dda4247a2b47a4e613141e95e8831440ffc2ed9c390bb1f3e37d33edad8d9736a646518b9782316a5338cd14df7a4aa27423e41ceffcf9a2d127f4e1bb6e1a89892b542180c8970529188c64db00fe3ef47c23f9860eab33d9072b9f8251703c6cb3af00d1c1157ac78ff90981be281a3734abde60f8950cd9e0107fe5c96947d9391a03ef0b7d864895ef5e84f0c7a9f4f6751a72872aa2d34f04c769bf87efaee69848fccbc3c15eaa82a8df323cd725e84bd55219447db49af2772aaef3b1ba6b199c1d35665181c8043876f444b680b9d4d6d9007ada79b4639337b74b2abd0e6befb67bc3f1afca1bcd0ab33b9f39290ed0845dec96780d5b24e711927b4b07b178200a6c49e81ad8a264bd872caf4de171c7c1c41c727e529c05f59bcc0946ab918ad6ff9f1be5b04f85b4bf67765fce174af8d074d6dcdc8e58c592d628f770bba9cf8c52453d7db9cdf3cba4b6bd0a073e65e2e59c2e48a9d3e87597295ef32ae64fff2f22ccd9746e9068cf9685258dac198d02a1b3124152ce36b0e97f2456213021b38813ce1acbc3c2ebc43605976fbc5133ecc5acb8d072b2e17939fbd93d2f93e81e3d6d6e2f5cb0866f1e8e540df6df11d3176d362e44275b6e14dddf4d3bc73d1f4641703275b11804a0418adc2740d944978ea73a7673f246035d98257bc9989ea228c466e55f314d62de573f12107440e84a1af9e98350d1edaa1703ccb7cb8d03d7ad133d6f46d0c4fd0a0587d16426454e1adc50fc147590e37383e4f427e28f712ae83a8f97d64d3ac372777c9d20894c8447aaef81f71542bcd660a934f9d763a6264271ef290ef6970162cd783af2032cbb1b0d9958eb37254ed35bf5f9aab4212ce829755a16eb2c26a833d29c56aa8701f5c71f15f810cd0fdd83e04b6ed7f1cbad60bad4cd8c04432ae302eb7d058978d64d5c072867866006b17a4c793a77b9deb1b76dad3371e7d8537cff49ccffcfaf991d4a0e1f5025137196a1cc20eee4465e5e9009e33ec7e238912d3fc627499bbd9a411eb4208649bd897f23f61397f21068e8bb1dd02f501eace793699273eec4fe27d5bbcb1302d37f2ed391294d26b0a9491db30c20584a6c667f7af25c06ff29a1fa510a3f7bd9632c3a7dc50f11177cde4a67cc83fecf7dec4612b8d223653ca6422cf14f46692c674c464747834a18bb05f5c70ac2f7114244fc5ac7b8bdbcf6ea7726a16daca593139477da4247bcd73a5cfef712efce745c46ba26c8b422bc05a8760326375fb84ca6204bb15d4d6ed40f5bb5e0425acd27fd20b75e7399b2558935d3df8d28305936c38d448b0409012f95fc42ec5d9885130e603f65eb1650c819c1d6f77639d8be3b90286f2fa27f9bbb79b2261359b40d73bd2b0747ddb460147ef995c0b4eb5a81eb0c7781c056b613ecd77daa5f1bdcc6965ae399a2e4845affc3483cea450198ef3475341ca639b9c1e224a6869c19bf6d74821ebe16ecf037e78569a2a7ffad781d2ef3d9f3852d3170551dfabae1b83b83135d803be29d385d975e10051a899e3164a2af84a96c035fcaba04a1674020cae41c06652d0993b28e741519f20f9826ff9e71e3e48cbe72c1d2fad13e60d8d656bd4dcabde0e3fb3ad24de5872ef4b6608a7ff6d92aed8fc357d8f4d0eddb2b435462b180d5bc5f153c3220ce1373294daca8b8fc8a989147b82a4385f1de8aede3ef30267e694848e6085cb64ff689a4c001f18cfeb1f5a983dce45fc02157377527b34c9b98fd92718221b5c9111de5dc1569c8a33f51fc814dba74d36838587eaa27dd161aae51ba138993969558025136e6567c2343303776b744c1387841cf322c065edd3378c672a77afe05bbd32228a155b4d27088a2a968df393935a760028e241b76ff09c431f0ce79ba5bfbfc08ae0c01ed570a7ee189979e78633f8c786b5fbc7ee6cee99da5dab476e1642d39c9614d51ee2ee4f3801c5e168750a198c2fe240897e5fe1d78964d81e0433507a58741efb3691728609e695259f316dc9ce8186156ac2a942f4c18712543fe5a58888ba8a36057812e7b85cc30d634872fdf9de84536eadbbecb60341637c51e3c3f2d815916bd324f06dd18aabc60c5ba778024e95561d073149b718ea4a659271ef27beb485f998f526d2794b798319eaf9c72bc8a3cea848df227f33c618fd9bdd96906fbfa4f3697f3c60b3318a20ef028431ac96a0034e2d4f9a7a7f44edde770110346c28a802b38290d03a0d688b5c4ae78413d9df3faca45a0c767b6c89200e2e49968e01eb764d49df5aed09cf8fbc53583f4c3e31286c2fd974c32a22511ae939d5575a7553828f900223426b9a934d747d19cf33d946b358b2a951df02fa45da5e0a8ff20c1d0953dc360ea32cfaf7711892c32ea3c9ab6fca29b7608fb782c10b0dbfb6f7cd355314a5377522c4e27278571833e03bccbcf58287bbc9e10ba2821bc1a2f94369ad3758fdc2d2318cc2b5492b97dfb8389352c579ed5651fe8412e66b160efb6c4d30767da0ccb5191278a805792c586753150412e19483dca74a47060765c7d05d72ba1b6481721a1fd0446f5868e8d7acb451a3efdb22dfcaea65e6ff5143c312ccfb78b69806da374d8f430493c460ee9191aaf3bf5269af98ef802d752f29e2f718f93debcbf44aeacf283a55cbcd6ef3c8537091c4f057cfaac08b45b0f14bcd9684900f245275a1ffcf0a56af3fc1b28c399eb9c29cd79f13a6c3c66da02a59da8c929671ebe21e7d17778db2dcc8146616cfc2016b9e5f302c3c1629fca43750deb3277e24715be56a6bfd65e47727b03c4c4a41a7d1c2b159dd1549b0d7d581b169fb525f6a8359a5257a17479cfdb2b172e0ce681e343c53112d055869001c94fb746bbbc12e54da2c9d204fab33d6ff065a57ec1f8a8a8fbed6ef66cb9c88020bc018d64a550634bc0ba72b4caf567e0d3d970385f2f535dc29f3949db90ff91cf12ab735e7f2962fb7692d0d775f6c67de56bb6030e58469d70d10da72aa7ba4bbea1a0c7e40375f4ff463f0faf4b4d6d37c3bb4eedd39a777b57ffff913b755f5c27187f8d2f9eddadf2b7090ba75fb921f59bf9e4901828ce77f79cf1b1895e8a146b0b17e525267217917a5c564ada1c5bb827020688dc4d79136b61d36a68c165aaaeb9e6254a94503716761722fce11b8f9c9b55bbeed8df5e69b691cd6e098b524ea91e43324c8a163812761b464412dbd75134cb242846b24d30b56dd6dd73f81b0f76bf6dbd8742292b87d24b2f72dc6cfee0bd2fad37464516b4c21cb3dca6477a2be70faa3ac5b4d2343cbeccbba596616a82dff745463a4ac18503fca59b9cf1e8d15956286e76332fd4f6df0afc91c5308a52a23b75e84f500391df7683308365fb0c23e6026df848c0f279792655484489d271f51d5aa16593548ed9b0bf85d36a1904e6133519c039377d48d5becded24a309df2f76b08710d026c56a64ee14d9547edd6100b790ed7e75251de9f31abc882910470309f025078960fa551985abe59924585fe098ec76a7c6d2955ab29a7059a91d108ecf28153218659f999c0b16d2c4fa873d507d6997c6f54379054aba0c5f2fa3e0dbaf7264f234c3b8c8ad9641f4d7f8be9db18dfd8", 0x1000}], 0x1, &(0x7f0000002940)=[{0xd0, 0x0, 0x2, "706ca4a2d66888ac39590937de4b9c158db89762720e8c16d080d3b9ab7a82ddff8d3e1d4cb63eb30b3c234547115215551ff81fa8e88df52330ba1aeecb87da49571d36681daf1ef77fa6c57acfeb3583fb5b910917f3be98f536a0280afdaee2904c28fde2e76b89405345526c002c28237ec47ae3685496dc33a4cc506e7383dadf0cd318ef2122854e3141978bfac76793bab3fce0064993a6510a169bb9dc812da13fcca0e788d5519daafd4121e5e63b5ab4383e71645df0380c10c5"}], 0xd0}}, {{0x0, 0x0, &(0x7f0000004c40)=[{&(0x7f00000039c0)='.', 0x1}, {&(0x7f0000003a00)="24eb1b434ab8f5be2e0a754d820d89b45eaa6957d8705064becd878cd34b25a258c848bb861ec9c2025fcf1fd791fbbce581ff64e476d5ccb34afe838a40d173d8923f99b65f838adb0366fc4e980387300a218c7de784a1ade125a2fa1c4d99eca61ec38b6af078df2c20d38ae3bccc19dc98bfa3ba5bbde1d1946ca41a4eb1f656039dc190672e3982613d1431ddc62449e40d", 0x94}, {&(0x7f0000003ac0)="b55bcf313e07f746962dc5e7063164982f1896f81dfa03a49c5a0ffba93eb3f1804b0aab51ffbd7fa8b16ce45e6b338cd05e299985611a0b928e10", 0x3b}, {&(0x7f0000003b00)="1ce068e8ef81cb29c97a7a3adf205681a5c7995b6e8e967d08f0d94c835720f2ad7d17e35749fe14b740c899b510ad44796361260543ad8e43d0c11b0b4e4d409926e66df827c8562738ad6cbc2f5e58118d48ccf2d5beeb830d63037ea8cd479545615468b4536774b81b0dbb2c15be1abfc368bf435cb92cd01fd50ce3db9c", 0x80}, {&(0x7f00000028c0)="1737f044ce99c9a079287629fd8aeaf1f8532f06f090643b6ffdb198d2635243c9becc527f52654ed18a0c38c1f333f2cd86232dc66273e1f67b550d2b89fae39c62d70c67bc377757f551d00067f45c3cb4c9cbfeb96472", 0x58}, {&(0x7f0000003c00)="bc0d08fd159f6dce8972a5a4698f544d096436d941a3974537dbd9229ef531f8ce3984126447fddb76bae23be30f3a83ceac25beb6d1719b", 0x38}, {&(0x7f0000003c40)="0158c5d7f4ae0f180839a7e7855f1651c29b54ce6056ad31cbc94d210b553a38fc87daeccb66cc3d980b49b4fb66dd485dbe8da20f467bb2554e984a161e47fdedb37c57f1b35ab3a2975fc0b06eb32224356d002d8a5e93be43443cd43d94bbb90b870ee7553955e70b37f7c0719719c1f40bf0502e94920805638c847252584e274be37f4e994eeea8be7fdf02521532bc03b8b837b69c2555a299dda3e37a0e4ad0d0eef1ae97c0e73ccb0aae6d98d64c7335140c6caf13d6e7025f26a56a4467827881ceb88508a13d6157c3e74b525119049ac326fe80dc42c041596c2e72bd452814f0c4bff3ba133703e9512a8a19f4f8ceb95ea0b34be7a83befa898a95f2cf447686ee7db1a8603afa2b26bc92e1dacdd2612a74821d0a0047f63baed1daa50789f0a9fb116d4f9730a13b9e0aef4be4a3699590df734e3395c80e9daeccfeae290625b1a3e3e191640e8c27728939cae7359214cfd06ed562e77a3fb70b9c5211f37dbaba19a8e3ae8f4d48353c098bb2cce9cb60d117aa44eb467dbdc005a3e90c8ba7875fe8a54db9a8b05bae37b42d85f2796bb9a943dcb865f79363bab85ffcdfcfd7abd57ed45179b951c05fce5ad0b6e5b29a67f28c3db3eb8ab595711b15643082b0ed7472ebf6e0bbd90f8a27f59a27601f46d6848544b86c14fca9d6c2779414a9b0e12c1abd17d44475260d5e3f7b1c0413665ca4cc50b81944906fa4359844faebfb5a2acdf0f00557ec548d0624418ce4fceae5c17deae045568eb2e0fbde78f9f29772507237d72f75adcd5e3e054ae19304fe43557d5dfec8d84baacbe54f40f59f43ebbcdea2652b98eb62112ebafdad33b72e91a3dff874abd8b615bf4e58b4c6c7f393f503f1a1ccf5003a5f9c3a5e37521f15c5d3f8bfe886967a700c10ce082961226687f0fa1ba421d0910c014a99cd8883f8112d52e9d8b02bff57b4b02f1edaa95e7366835e3928c3f42b791948100d1a71d2aed511e02f37a922067f0bfdd9d33c49ca985a6445e496cb7934a99860d9656a110473bcd484b3581d470bb5e86078a79070254084dcee4e379b2f63cba1c4d1436440f6da4deee8b4be5d26322117fb7a95572aa57306c520de55b0cf0469279d74c7ecdd904817a2613b5f9ae69f7b39f198fe9aeecffa7d0f896a598c569a586e81e9cc89ef38cb10382796f4e4cceaea6ec256ef7a5fd2fff018ce81bfadf6ebb2875913b99ee5f7d86a63b1738e9dcad5d65d4832c94e90bb0266d57e9a1b8b9266e011a7af236b0f62e019f511c8ac298e1775edce3fb69616c71fef55361a003155d5b4829d654915e50b1d21ec14887bed800c5e3d2797995e91b4fad58876dbf3e2dd9d0f27a8956842467b5e61920bbb9008b0dc5b6a527b87a331eda3a4d60bcd447f70c6ee5258bc879d1e3e8a7636404e5cabfa0f61bd8bc4336ff07d05006c78b3bd0bec992d2d72249fae4507ec9cd856db40fc1101bce6ad6c95bacb6b3823e43993ca5ca17aed68b1b56a62144daf8efe36e67018070b8c2500b41092bf8870eba91a46723dc0dbc065ccc154e88df2af17c4f4785f0e396d4a8e945a9bda664b3d1abe09ce87078a5b78b8bb9aa0ae8bd0dd99d85ea1c8e52c7dc6c23bb12cbbe6131b74aeac9e1fb948e0a4f55c8932285942c86d77f3daa0e7d449fcc53ec3df0a81d395c25480def562528490b22fd11c77a798db059697fd4e91acde551303ef9b3d43a5b69c927d7716537f07fb4679b7ab3e263f3b36e838763b9c298ed484db74d21f943bf957d6a69cd945ba0a8476d640ddb4f008074aa22598031ccb08ea1b1c0f3ab6ce39a5c8f497f1dd052bf9a39ef020f9b18e643f85beeec5e73ec5e44df6a145b6f9f0bff1f39d18e33c2b2606e50e6d25724ee6c7a5bcd5f9ecdee090beabfc5a5148ed70fdc00c0b0cd5f8370f1430016c970f43c142b10c4df725905a88dec475340751610b34a0ede9c272e6247c52384658f3b2430fc730787067c9dbba7e2b18b582363e3c45507ca7cb4904fca193156a843e27a97a5ff047bd3a62de39633eb3c45ca83eb3e7c9038333b94033565e760c1386a9f84b80392b1778d07c6e5a86c4761cf5ce065670abddb1323f096d98bdf292730aa969d1a04feeeb54c50fbe63f9dbe014fb4beb642745ae3c3abdac6b1f76ab03207971f362b9c97873f4caae73d52aa464577bd006d4c32d9a3d88a6919719759a944bfa0a4e829bbd39f438368b4a3039ba5d877fe454fa8cf5cdf4616453f73584e7bda4033ce7aba89f352441a6d56b9a5ab4c41e9c795f51a56634badbf8a429f36a5b9eb275094923e79aac83bd2d5fb40c4db71e899fd06c2b35aa9f0efd8f64bfeba7e9e6b44c93f882a079f647487f7bf3feec7e9ecdc83e0311d7568bc2aa6897197ab962f80df886ed3f7e7ed85f45e697ad6cddbdda9e2aa7d55971f1879a8abe04b8fc11f916baaf57879213dedaf3fca55e43308637f1220308e97b052d49fd6a8b1fae62f54734cadc5d71c759942a8fc3391efc73a2bdaaeaa6cee1bdc8a814a39e8d324d2d4f57c78ad8025cf90941b6c705a1990396e90a4fa1ab2186a37730a4b080f7ae9cdd832d45d2623945857ac433759061c56fcf0bbe8c6d2bbbedacc13392973a2b7ee87e1bc5b562940b44324dce3738310cbfbf76a659ff7adcd61f28563d5801b007e247b8f39b555030e938cee2d66083c283019dbabd937e088a4fc26fc85e8dcb2a238659be48dd5c35ab1439b5589a56d527e92e17e0494db77c4ec60e0f1cd43c8409a98cd71ad750723bcf3b47f97d659478a9dec56c1290d51f3b996f48b33344647dbf07004d0f4505bb69ca7687f0128ba8b6be7ad066f8b2bc762d77537581464e22369f0d908a22911cf0bf1acc952ef1bc6263f2f1ece3591bd17192b3aa42157718eb7b02149955c3c7479357b40329d5c985b0014dda17b5f954ef60b05d88d2b8d270ae4d7e838a219786fd0ef6225114aa4a7a72976f7c51ea6b1af712b3b2d9e8185a7daeb21de53eaf61e00f387f2c1c8f38fcec420c52d571173b56bd3eb2a8770397cef7d471775a9c2e41c3322de10d7aed71057e1090bd7ce0990d9f028dfb0e483423d42c45c34011d13a6cfb307904c4d0387b6c3e05f12fdcad4cb469a89f6cd27380d9f7b10e3fee65483f5c24108459d67bcef516cd29a0b660ed5efbf30d0054d6286e4642a7f44025a8edc489a34d985bd3c0bdd07f8e7f97a32d099e3f26c5de4d83f3261ff9ed579cf001f5ae72b97e5c6f2df32beb159969df31a0dc7b0df0f13af3844b34dcd38bd1d78cfb3b43f51b5ed9b7269ef7267b17c8e09785cb39c9024e6a65dd97764d33e22f0132b5c854fde508b4588a4ce0d7d36976f64a2d174c8129fca4eb5bd77d86a59cbacbf165bcb977744d0831c0e2d394da95ffd8e55d2512b25cdd50a5f35d27948f7d84b1f4a4907e907b08b798b540f08de2caedefac7c094dc4c97cbf4f3e90ef6e5f5314b3ef15c743ce683f62c6d2fc0869881bfd8ca789dc28198a78c0f5aa3a8540d1ea08c72389ca9870456cdf773046ff9188186ad45e59dee5d93bb57cc8a363f39869d8f1b298f305136faddcf2f0f63a95d5b99da66fe0e0e485dd0524d4eb21b0873fc976b472745074217dbdf167d9d4c26bd5b9db058c7016c008047d49b47e37e8c8f3d3d3c8d12c92a6951e6b934eec32df45a5914b8eb1a343fbf8b12c87cfa0a40fde154ad47c41925fb6776fca7a27b604fcb0d3d9c04cc0122baea9f02b7c122bf447427f9b4ee27e9348f9046d8a9e12d1c770f4116ef25be93dd4bdd5603b3f862326919aa628199f1c48f1a39690e18fb3021337e85ffa34a5490a938ebd009ea19509ccdd42fd538df276a3fe4e367fdaf7686fb324f86b4f092338d354b88ed0909e009fed8eac0c9b7e184a8a55a7aba5fb22edd4f540e7bd0e68b1686350d7d9e4216fe950f4f93733aa4b035eadd97c09d84fd6585f2efc2bb5b256ea6ac98980415850860eccac2ff075a501a610a684e4de07e97ce67ea6fe632236972a017f7d1714ee3cdb8ff7163c38eeacb1a852747a2b0278df2963be7ab266e8d2aae9bde86922497ca442a7b99e0bacce174072eefb10ac259562e6554d5f7ecbe274a63b5ac10356922e4b6048e5a7c62edf7ad692e799e212a03afc71c48df990618ba73a3c24fb7c3f23b307b18cca154592dd5be06e9cf141a60c10edc257867b8a2e228d11812672f7487a18d80c283a9677a94453003779faf106800752be8c4305a30dedc8642be595a0a56e722dc822900d6230a0b13beca8c5931d3060e6eba0d09fe330842917b67631e00017088500de38a409bd1659619ec1c6dd4c32ecd4483fe07b2c78c33f8e7f03f5324a75fb82d5c6d0b6b4e713ff6faa265603645c0e4ed90e7e9701c2c17c058d033d24f9efb8522073f9c017fec1e1a1d507f0516d1c08a364ff2d5c211257d9b720b6b31d3e1d6b3d3b826130428e112e9b71e0acfc8875fa67decc0f2864fb3bf934be4fc80ab7d4da1704642cc960a74b62216ba1533d210ee30a422755d9784204dfa332ed41734befc7c2d5c6d7ae9197252d1257de577b696c111d9e963156b85a404e2bbb8151ef19647e501a8bc37988f63c8d5c04a4f49903d8477846cffb45518c3bc286499c10c536d88503c86e4ab9ac8e799264c28d8a45462f5398cf3bab05452c3b17b7c4b704d37519d3e5d7fe31b6a680511497a80eacce45bbe601dca37ef9ae655c27f81d5f948342da537a3ee2524ecf0f7179971b401178f139514f26961cd7587a362243df7124ad0e4ae4a189641e34c3769c9b5dabbd47c6b9cc4b04cf2ab174369bebd159f88907491c0ab98b2da12762e65324a6036979ca19d3072cf8daf0f2a652666ab91059ac8ca38abeeb164fe300ee61c32bc58d23d4707ca0ef7995713af9f0b3363a7df1ecaf91941b057dd36fa3ee1821708245c937fd414dc0b6cb8fe9811ad782131b53a4cde9ccc237ff0c347ef9f69a0c60801eaffc4f91765d91c1d7e9d27735718687b7f1a9fc93c24200fdcaa695ca2b28397fbb4860e37b4c9cdc9addc6e1c8bc866baf325021ed8f110bafb05b8f2c5131fe207b421b27af615b5a98b1990fba7be31583fafccd568f7d5cb5e2e7c5aadf939e3b67c50496d77c26fd29c1d9348faabf248dceac16326ae806258b36eeee5eafcd8fd3853d79e79098819006aa47777d925a4ff33a812e2bcfe41bed0ffcc17e724190871d0ca9380a6f67b8a32851ae2ecb9c7cf83355a38fb300020ebd17747f031511d4b2b379c38d32a93c87e56bce3baab7c904a12179f957bc0f47eccd167c35c05180c2798a021d8ece4f32651009dfdf207b158a5f95d1eb161b79a800c13654b87cebca5c1805adb3bd3faeef49d39da36b4a29eea21a685ec7fb03e171bf699929af8f61cbb2dc82f690eb24a471f119e2de335338173ff47807cd9e4bb4903da99cdf294941cba9ad4693150455e37f27a82b45de13254b7cf22ca1a4c033a5db9345caf0ac94442461f850c8f21a5ab62b14f638c4d71e60bac276f934d38f8b4c4eddde23bcfd957ebfb46537d221fbbf93869a5e438593f5dcd9ba425d42df047106236e4adf624b808de3cb27a25d1e222933b0b6df494528f6a8f1bec0d7b48a409dfdf4b3881135b93279a1bd226e70c19a46fee43157002d327236939a5ea9aa813273c6c8d31a6e3def2c237626d5e303dc3751d56c3b30110c862", 0x1000}], 0x7, &(0x7f0000004cc0)}}, {{&(0x7f0000004e40)=@rc={0x1f, @none, 0x1f}, 0x80, &(0x7f0000005340)=[{&(0x7f0000004ec0)="6efab7ed36d9f19f", 0x8}, {&(0x7f0000004f00)}, {&(0x7f0000004f40)="30f70f02cbcd3ae519807600de89f003bf43308059e61becb7ebef45edb355e21856a9430e317f5f975579e38d749146d716a5445fc28a422457ecafe57b2fc0eeba89c366834e585a1955b2e980a3d748005f6baf", 0x55}, {&(0x7f0000004fc0)="d8c6b513fea6d53081a337a5420c23b55f14c7f62eb98c4933d7a9d98d398c27251c1fc43ed6ef9b2eb28499150a516853c3888a3acca888bcc22bc51fbf14db4ac18c53927166759470ed764f6019bc8a4dc7a33f87b4edc7e017af38faf7ed92cdbde7be1851fbb5867559ddbb166b9b903b95edd09c01e71c26019bc2fef6c121f1ba0616b531cc6a5d3cfbf64d4b537921568f511dc1742dec0068df5d00a40c338b35a1d6e1d7dd816d8e759018dfd39210d9b16b0b9718fe56cb0b3eb8ebdae00df5307ac877dc532fc272a863ef35d7", 0xd3}, {&(0x7f00000050c0)="d1ff92f2b200a845e0cb85b49e76463982dc0f104d389ffcdf2fddbdba366504f785310663b1775f1d1e9044dbe8095ba4ed12ac9f18be6c550010d26d4957429148a49130f5255a23fc565ee6f2849af8d5fde3a14fa835897be284bd3cbc0c4a27709337d693b69648f3eb6005f3b45a748b78686aa5b051bb0b523012831791585dd625ad271fb4815d11e833f89106c7a9c38b156c86c8281010b916b4398a0b48e4f69c72ecd07c268926e169479c181d4a06026880e9067a3677b0a656d943fdaf7eb2e7c4ec48838d298e1e6e9eb6341a8608ac1df01862f9a3b0c25e30764b1716cc95b6fbb152a1", 0xec}, {&(0x7f00000051c0)="a1f29d98f1a09918553f2e03c1020500ef9b77c8839a8606f06f5ed245b46068a5f3a102e8c76c74bedd46b22cdefbd9f66d5ee47e0a0426d5d5d1cf654bbbb8f65927", 0x43}, {&(0x7f0000005240)="2f7fb245379f0644b9", 0x9}, {&(0x7f0000005280)="6331432cf8fed9580cec00185afdad24a99f4ed53f27a4baba52cf41746615e1d0eba22800113378aed3cf33a2b7eccd39e1fa569d5ae20ff161489d4a85968ca375eae41872c9832981c1662eb8584713fb957b67ba4bd41496240817ed", 0x5e}, {&(0x7f0000005300)="9f529c194ef9aeed442fd4f8eda3d5b8bdcd7d0ba6c454233fae1461ae11cf59db490f25c17c5c33c7068a09220dcb6eb3eb25ce1301817695", 0x39}], 0x9, &(0x7f0000005400)}}], 0x6, 0x20) 21:20:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xf000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, r1) 21:20:42 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x3a00) 21:20:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:20:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xe600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:43 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x76, 0x7, 0x6, 0x60, 0x0, 0x401, 0x40006, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x2, 0x6, 0x1, 0x3, 0x4ee, 0xfffff537, 0x92e8, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0xf, r0, 0x3) sendfile(r0, r1, 0x0, 0x10000) 21:20:43 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) chdir(0x0) (async) creat(0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) 21:20:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xe400) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, r1) 21:20:43 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) (async, rerun: 64) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x76, 0x7, 0x6, 0x60, 0x0, 0x401, 0x40006, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x2, 0x6, 0x1, 0x3, 0x4ee, 0xfffff537, 0x92e8, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0xf, r0, 0x3) (async, rerun: 32) sendfile(r0, r1, 0x0, 0x10000) (rerun: 32) 21:20:43 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) (async) chdir(0x0) (async) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) 21:20:43 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) chdir(0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000040)={0x0, @aes256, 0x0, @desc2}) 21:20:43 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xd400) 21:20:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:20:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xd800) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, r1) 21:20:44 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x76, 0x7, 0x6, 0x60, 0x0, 0x401, 0x40006, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x2, 0x6, 0x1, 0x3, 0x4ee, 0xfffff537, 0x92e8, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0xf, r0, 0x3) sendfile(r0, r1, 0x0, 0x10000) 21:20:44 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) chdir(0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000040)={0x0, @aes256, 0x0, @desc2}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) (async) chdir(0x0) (async) creat(0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) creat(&(0x7f0000000100)='./bus\x00', 0x0) (async) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) (async) sendfile(r0, r1, 0x0, 0x10000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) sendmmsg(r2, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000040)={0x0, @aes256, 0x0, @desc2}) (async) 21:20:44 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xc800) 21:20:44 executing program 2: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1e00) 21:20:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xd600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:44 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) (async) chdir(0x0) (async, rerun: 64) creat(0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) (rerun: 64) sendmmsg(r2, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000040)={0x0, @aes256, 0x0, @desc2}) 21:20:44 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x1000021, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7fff) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x2) sendfile(r1, r3, 0x0, 0x10002) 21:20:44 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) chdir(0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1800) 21:20:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10600) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, 0x0, 0x0, 0xffffffffffffffff) 21:20:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10600) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, 0x0, 0x0, 0xffffffffffffffff) 21:20:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10600) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, 0x0, 0x0, 0xffffffffffffffff) 21:20:45 executing program 2: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1600) 21:20:45 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x1000021, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7fff) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x2) sendfile(r1, r3, 0x0, 0x10002) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) fchdir(r0) (async) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x1000021, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) creat(&(0x7f0000000100)='./bus\x00', 0x0) (async) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7fff) (async) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x2) (async) sendfile(r1, r3, 0x0, 0x10002) (async) 21:20:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x0, 0x80000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x2400) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:20:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10000) (fail_nth: 1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 708.959628][T29697] loop3: detected capacity change from 0 to 262160 [ 708.984412][T29697] FAULT_INJECTION: forcing a failure. [ 708.984412][T29697] name failslab, interval 1, probability 0, space 0, times 0 [ 708.997238][T29697] CPU: 0 PID: 29697 Comm: syz-executor.3 Not tainted 5.16.0-syzkaller #0 [ 709.005763][T29697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 709.015833][T29697] Call Trace: [ 709.019102][T29697] [ 709.022026][T29697] dump_stack_lvl+0xd6/0x122 [ 709.026645][T29697] dump_stack+0x11/0x1b [ 709.030815][T29697] should_fail+0x23c/0x250 [ 709.035229][T29697] ? alloc_pipe_info+0xac/0x350 [ 709.040103][T29697] __should_failslab+0x81/0x90 [ 709.044893][T29697] should_failslab+0x5/0x20 [ 709.049587][T29697] kmem_cache_alloc_trace+0x52/0x350 [ 709.054976][T29697] alloc_pipe_info+0xac/0x350 [ 709.059765][T29697] splice_direct_to_actor+0x5f7/0x650 [ 709.065275][T29697] ? security_file_permission+0x7c/0xa0 [ 709.071100][T29697] ? do_splice_direct+0x190/0x190 [ 709.076221][T29697] ? security_file_permission+0x87/0xa0 [ 709.081978][T29697] do_splice_direct+0x106/0x190 [ 709.086927][T29697] do_sendfile+0x675/0xc40 [ 709.091634][T29697] __x64_sys_sendfile64+0x102/0x140 [ 709.096947][T29697] do_syscall_64+0x44/0xd0 [ 709.101450][T29697] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 709.107368][T29697] RIP: 0033:0x7f086e3f6fe9 [ 709.111896][T29697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 709.131530][T29697] RSP: 002b:00007f086d56d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 709.139985][T29697] RAX: ffffffffffffffda RBX: 00007f086e509f60 RCX: 00007f086e3f6fe9 [ 709.148056][T29697] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000000014 [ 709.156040][T29697] RBP: 00007f086d56d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 709.164040][T29697] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 709.172186][T29697] R13: 00007ffc0cdc530f R14: 00007f086d56d300 R15: 0000000000022000 [ 709.180252][T29697] [ 709.223749][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:20:45 executing program 1: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) chdir(0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './bus', [{}, {}], 0xa, "8293a537f79a047e021bf16f2dc20ff58b198a63ef955f9e01824f026db0d8649120a9b98a3fe8f993c86f3a0846bd11f844eae3de94ad865e0b3b7ce6077a910cd774b67d2b19e489170f0a54073ce753cb8b12147259"}, 0x62) r1 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) r3 = dup2(0xffffffffffffffff, r1) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0), 0x10) lseek(r2, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r4, 0x0, 0x10000) 21:20:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x2a00) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x0, 0x80000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x492) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:20:45 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x1000021, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7fff) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x2) sendfile(r1, r3, 0x0, 0x10002) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) fchdir(r0) (async) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x1000021, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) creat(&(0x7f0000000100)='./bus\x00', 0x0) (async) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7fff) (async) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x2) (async) sendfile(r1, r3, 0x0, 0x10002) (async) 21:20:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10000) (fail_nth: 2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:45 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 1) [ 709.316683][T29708] loop3: detected capacity change from 0 to 262160 [ 709.371383][T29708] FAULT_INJECTION: forcing a failure. [ 709.371383][T29708] name failslab, interval 1, probability 0, space 0, times 0 [ 709.384377][T29708] CPU: 0 PID: 29708 Comm: syz-executor.3 Not tainted 5.16.0-syzkaller #0 [ 709.392863][T29708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 709.402961][T29708] Call Trace: [ 709.406251][T29708] [ 709.409208][T29708] dump_stack_lvl+0xd6/0x122 [ 709.413835][T29708] dump_stack+0x11/0x1b [ 709.418534][T29708] should_fail+0x23c/0x250 [ 709.422980][T29708] ? kcalloc+0x32/0x40 [ 709.427086][T29708] __should_failslab+0x81/0x90 [ 709.432024][T29708] should_failslab+0x5/0x20 [ 709.436555][T29708] __kmalloc+0x6f/0x370 [ 709.440735][T29708] ? kmem_cache_alloc_trace+0x24b/0x350 [ 709.446302][T29708] kcalloc+0x32/0x40 [ 709.450053][T29730] FAULT_INJECTION: forcing a failure. [ 709.450053][T29730] name failslab, interval 1, probability 0, space 0, times 0 [ 709.450466][T29708] alloc_pipe_info+0x1be/0x350 [ 709.468683][T29708] splice_direct_to_actor+0x5f7/0x650 [ 709.474500][T29708] ? security_file_permission+0x7c/0xa0 [ 709.480204][T29708] ? do_splice_direct+0x190/0x190 [ 709.485240][T29708] ? security_file_permission+0x87/0xa0 [ 709.491041][T29708] do_splice_direct+0x106/0x190 [ 709.495920][T29708] do_sendfile+0x675/0xc40 [ 709.500595][T29708] __x64_sys_sendfile64+0x102/0x140 [ 709.506351][T29708] do_syscall_64+0x44/0xd0 [ 709.510883][T29708] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 709.517082][T29708] RIP: 0033:0x7f086e3f6fe9 [ 709.521937][T29708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 709.542072][T29708] RSP: 002b:00007f086d56d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 709.550509][T29708] RAX: ffffffffffffffda RBX: 00007f086e509f60 RCX: 00007f086e3f6fe9 [ 709.558535][T29708] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000000014 [ 709.566497][T29708] RBP: 00007f086d56d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 709.574559][T29708] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 709.582879][T29708] R13: 00007ffc0cdc530f R14: 00007f086d56d300 R15: 0000000000022000 [ 709.591318][T29708] [ 709.594445][T29730] CPU: 1 PID: 29730 Comm: syz-executor.0 Not tainted 5.16.0-syzkaller #0 [ 709.603756][T29730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 709.613910][T29730] Call Trace: [ 709.617331][T29730] 21:20:45 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 1) 21:20:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10000) (fail_nth: 3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 709.620359][T29730] dump_stack_lvl+0xd6/0x122 [ 709.624976][T29730] dump_stack+0x11/0x1b [ 709.629147][T29730] should_fail+0x23c/0x250 [ 709.633650][T29730] ? alloc_pipe_info+0xac/0x350 [ 709.638551][T29730] __should_failslab+0x81/0x90 [ 709.643405][T29730] should_failslab+0x5/0x20 [ 709.647930][T29730] kmem_cache_alloc_trace+0x52/0x350 [ 709.653231][T29730] alloc_pipe_info+0xac/0x350 [ 709.657943][T29730] splice_direct_to_actor+0x5f7/0x650 [ 709.663481][T29730] ? security_file_permission+0x7c/0xa0 [ 709.665294][T29733] FAULT_INJECTION: forcing a failure. [ 709.665294][T29733] name failslab, interval 1, probability 0, space 0, times 0 [ 709.669088][T29730] ? do_splice_direct+0x190/0x190 [ 709.669121][T29730] ? security_file_permission+0x87/0xa0 [ 709.669197][T29730] do_splice_direct+0x106/0x190 [ 709.669226][T29730] do_sendfile+0x675/0xc40 [ 709.669251][T29730] __x64_sys_sendfile64+0x102/0x140 [ 709.707648][T29730] do_syscall_64+0x44/0xd0 [ 709.712089][T29730] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 709.718001][T29730] RIP: 0033:0x7f661f687fe9 [ 709.722558][T29730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 709.742616][T29730] RSP: 002b:00007f661e7fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 709.751175][T29730] RAX: ffffffffffffffda RBX: 00007f661f79af60 RCX: 00007f661f687fe9 [ 709.759452][T29730] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 709.767534][T29730] RBP: 00007f661e7fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 709.775780][T29730] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 709.783938][T29730] R13: 00007fffb2da368f R14: 00007f661e7fe300 R15: 0000000000022000 [ 709.791952][T29730] [ 709.794997][T29733] CPU: 0 PID: 29733 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 709.803529][T29733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 709.813843][T29733] Call Trace: [ 709.817159][T29733] 21:20:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:46 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 2) [ 709.820802][T29733] dump_stack_lvl+0xd6/0x122 [ 709.825412][T29733] dump_stack+0x11/0x1b [ 709.829769][T29733] should_fail+0x23c/0x250 [ 709.834616][T29733] ? alloc_pipe_info+0xac/0x350 [ 709.839584][T29733] __should_failslab+0x81/0x90 [ 709.844557][T29733] should_failslab+0x5/0x20 [ 709.849217][T29733] kmem_cache_alloc_trace+0x52/0x350 [ 709.854523][T29733] alloc_pipe_info+0xac/0x350 [ 709.859303][T29733] splice_direct_to_actor+0x5f7/0x650 [ 709.864701][T29733] ? security_file_permission+0x7c/0xa0 [ 709.870360][T29733] ? do_splice_direct+0x190/0x190 [ 709.875577][T29733] ? security_file_permission+0x87/0xa0 [ 709.876869][T29737] FAULT_INJECTION: forcing a failure. [ 709.876869][T29737] name failslab, interval 1, probability 0, space 0, times 0 [ 709.881418][T29733] do_splice_direct+0x106/0x190 [ 709.881453][T29733] do_sendfile+0x675/0xc40 [ 709.903720][T29733] __x64_sys_sendfile64+0x102/0x140 [ 709.909140][T29733] do_syscall_64+0x44/0xd0 [ 709.913560][T29733] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 709.919494][T29733] RIP: 0033:0x7fbf1a39afe9 [ 709.924000][T29733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 709.943885][T29733] RSP: 002b:00007fbf19511168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 709.952937][T29733] RAX: ffffffffffffffda RBX: 00007fbf1a4adf60 RCX: 00007fbf1a39afe9 [ 709.961513][T29733] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 709.970083][T29733] RBP: 00007fbf195111d0 R08: 0000000000000000 R09: 0000000000000000 [ 709.978394][T29733] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 709.986364][T29733] R13: 00007ffd2764166f R14: 00007fbf19511300 R15: 0000000000022000 [ 709.994506][T29733] [ 709.997608][T29737] CPU: 1 PID: 29737 Comm: syz-executor.0 Not tainted 5.16.0-syzkaller #0 [ 710.006234][T29737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 710.016408][T29737] Call Trace: [ 710.019951][T29737] [ 710.022970][T29737] dump_stack_lvl+0xd6/0x122 [ 710.027724][T29737] dump_stack+0x11/0x1b [ 710.031985][T29737] should_fail+0x23c/0x250 [ 710.036710][T29737] ? kcalloc+0x32/0x40 [ 710.041137][T29737] __should_failslab+0x81/0x90 [ 710.046072][T29737] should_failslab+0x5/0x20 [ 710.050783][T29737] __kmalloc+0x6f/0x370 [ 710.054934][T29737] ? kmem_cache_alloc_trace+0x24b/0x350 [ 710.060476][T29737] kcalloc+0x32/0x40 [ 710.064365][T29737] alloc_pipe_info+0x1be/0x350 [ 710.069136][T29737] splice_direct_to_actor+0x5f7/0x650 [ 710.074563][T29737] ? security_file_permission+0x7c/0xa0 [ 710.080207][T29737] ? do_splice_direct+0x190/0x190 [ 710.085582][T29737] ? security_file_permission+0x87/0xa0 [ 710.091125][T29737] do_splice_direct+0x106/0x190 [ 710.096162][T29737] do_sendfile+0x675/0xc40 [ 710.100574][T29737] __x64_sys_sendfile64+0x102/0x140 [ 710.105765][T29737] do_syscall_64+0x44/0xd0 [ 710.110191][T29737] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 710.116078][T29737] RIP: 0033:0x7f661f687fe9 [ 710.120487][T29737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 710.140276][T29737] RSP: 002b:00007f661e7fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 710.148753][T29737] RAX: ffffffffffffffda RBX: 00007f661f79af60 RCX: 00007f661f687fe9 [ 710.156981][T29737] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 710.164998][T29737] RBP: 00007f661e7fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 710.173190][T29737] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 710.181279][T29737] R13: 00007fffb2da368f R14: 00007f661e7fe300 R15: 0000000000022000 [ 710.189348][T29737] [ 710.231587][T29740] FAULT_INJECTION: forcing a failure. [ 710.231587][T29740] name failslab, interval 1, probability 0, space 0, times 0 [ 710.244521][T29740] CPU: 1 PID: 29740 Comm: syz-executor.3 Not tainted 5.16.0-syzkaller #0 [ 710.253127][T29740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 710.263189][T29740] Call Trace: [ 710.266472][T29740] [ 710.269420][T29740] dump_stack_lvl+0xd6/0x122 [ 710.274029][T29740] dump_stack+0x11/0x1b [ 710.278235][T29740] should_fail+0x23c/0x250 [ 710.282651][T29740] ? __iomap_dio_rw+0x143/0x10b0 [ 710.287740][T29740] __should_failslab+0x81/0x90 [ 710.292513][T29740] should_failslab+0x5/0x20 [ 710.297032][T29740] kmem_cache_alloc_trace+0x52/0x350 [ 710.302344][T29740] ? avc_has_perm_noaudit+0x1c0/0x270 [ 710.307841][T29740] __iomap_dio_rw+0x143/0x10b0 [ 710.312657][T29740] ? sysvec_apic_timer_interrupt+0x4a/0xb0 [ 710.318506][T29740] iomap_dio_rw+0x38/0x80 [ 710.322829][T29740] ext4_file_read_iter+0x190/0x1f0 [ 710.328095][T29740] generic_file_splice_read+0x24f/0x330 [ 710.333937][T29740] ? splice_shrink_spd+0x60/0x60 [ 710.339221][T29740] splice_direct_to_actor+0x2aa/0x650 [ 710.344590][T29740] ? do_splice_direct+0x190/0x190 [ 710.349652][T29740] do_splice_direct+0x106/0x190 [ 710.354542][T29740] do_sendfile+0x675/0xc40 [ 710.359046][T29740] __x64_sys_sendfile64+0x102/0x140 [ 710.364353][T29740] do_syscall_64+0x44/0xd0 [ 710.368766][T29740] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 710.374665][T29740] RIP: 0033:0x7f086e3f6fe9 [ 710.379068][T29740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 710.398779][T29740] RSP: 002b:00007f086d56d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 710.407281][T29740] RAX: ffffffffffffffda RBX: 00007f086e509f60 RCX: 00007f086e3f6fe9 [ 710.415324][T29740] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 710.423377][T29740] RBP: 00007f086d56d1d0 R08: 0000000000000000 R09: 0000000000000000 21:20:46 executing program 1: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) chdir(0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './bus', [{}, {}], 0xa, "8293a537f79a047e021bf16f2dc20ff58b198a63ef955f9e01824f026db0d8649120a9b98a3fe8f993c86f3a0846bd11f844eae3de94ad865e0b3b7ce6077a910cd774b67d2b19e489170f0a54073ce753cb8b12147259"}, 0x62) (async) r1 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) (async) r3 = dup2(0xffffffffffffffff, r1) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0), 0x10) (async) lseek(r2, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r4, 0x0, 0x10000) 21:20:46 executing program 5: r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000480)="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", 0x1000, 0x5}, {&(0x7f0000000080)="5b661c013db3d2ac5babf435e20381ef7301c2b348d77d967794ac837b864cc7774e8e40c2a93761d0a6b8d7ffa668a895b5ce3a01b06f00a59f46d79eccf4dcfedff0110aa1d7bbdc14764fa306f1", 0x4f}, {&(0x7f0000000200)="47b9c617000c9ce7a4fc995980cae4968e66ed72995fa6a3779371c3ad1ba964027cfebae6b96e43b620c9ad01347b122535a2a999c698ef74344ea724dc5ba959930100165172076ef5b021c6f664aec0ea8b2037e6dd7d525732a8cf93e9f301e6d39f17a439e08d20fdc803b1e41d617254709c9672c240617d343dddf91ddfebf7d48508c134854072d5cced8f0af31cbb6e9459bc9feea45de746", 0x9d, 0x3}, {&(0x7f0000001480)="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", 0x1000, 0x3f}], 0x408, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './bus\x00'}) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendfile(r2, r3, 0x0, 0x10000) 21:20:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:46 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 2) 21:20:46 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 3) 21:20:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10000) (fail_nth: 4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 710.431580][T29740] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 710.439636][T29740] R13: 00007ffc0cdc530f R14: 00007f086d56d300 R15: 0000000000022000 [ 710.447664][T29740] [ 710.475801][T29748] loop5: detected capacity change from 0 to 8 [ 710.476561][T29749] FAULT_INJECTION: forcing a failure. [ 710.476561][T29749] name failslab, interval 1, probability 0, space 0, times 0 [ 710.482104][T29744] FAULT_INJECTION: forcing a failure. [ 710.482104][T29744] name failslab, interval 1, probability 0, space 0, times 0 [ 710.494658][T29749] CPU: 0 PID: 29749 Comm: syz-executor.0 Not tainted 5.16.0-syzkaller #0 [ 710.494685][T29749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 710.494697][T29749] Call Trace: [ 710.494704][T29749] [ 710.494712][T29749] dump_stack_lvl+0xd6/0x122 [ 710.536641][T29749] dump_stack+0x11/0x1b [ 710.540807][T29749] should_fail+0x23c/0x250 [ 710.545274][T29749] ? __iomap_dio_rw+0x143/0x10b0 [ 710.550236][T29749] __should_failslab+0x81/0x90 [ 710.555358][T29749] should_failslab+0x5/0x20 [ 710.559930][T29749] kmem_cache_alloc_trace+0x52/0x350 [ 710.565323][T29749] __iomap_dio_rw+0x143/0x10b0 [ 710.570167][T29749] iomap_dio_rw+0x38/0x80 [ 710.574506][T29749] ext4_file_read_iter+0x190/0x1f0 [ 710.579823][T29749] generic_file_splice_read+0x24f/0x330 [ 710.585386][T29749] ? splice_shrink_spd+0x60/0x60 [ 710.590341][T29749] splice_direct_to_actor+0x2aa/0x650 [ 710.595762][T29749] ? do_splice_direct+0x190/0x190 [ 710.600958][T29749] do_splice_direct+0x106/0x190 [ 710.605873][T29749] do_sendfile+0x675/0xc40 [ 710.610306][T29749] __x64_sys_sendfile64+0x102/0x140 [ 710.615536][T29749] do_syscall_64+0x44/0xd0 [ 710.620042][T29749] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 710.626262][T29749] RIP: 0033:0x7f661f687fe9 [ 710.630774][T29749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 710.650443][T29749] RSP: 002b:00007f661e7fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 710.658853][T29749] RAX: ffffffffffffffda RBX: 00007f661f79af60 RCX: 00007f661f687fe9 [ 710.666895][T29749] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 710.674876][T29749] RBP: 00007f661e7fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 710.682935][T29749] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 710.690968][T29749] R13: 00007fffb2da368f R14: 00007f661e7fe300 R15: 0000000000022000 [ 710.698958][T29749] [ 710.702044][T29744] CPU: 1 PID: 29744 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 710.710473][T29744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 710.720567][T29744] Call Trace: [ 710.723873][T29744] 21:20:47 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 4) 21:20:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x10600) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, 0x0, 0x0, r0) 21:20:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x10600) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, 0x0, 0x0, r0) [ 710.726815][T29744] dump_stack_lvl+0xd6/0x122 [ 710.731467][T29744] dump_stack+0x11/0x1b [ 710.735649][T29744] should_fail+0x23c/0x250 [ 710.740080][T29744] ? kcalloc+0x32/0x40 [ 710.744203][T29744] __should_failslab+0x81/0x90 [ 710.748981][T29744] should_failslab+0x5/0x20 [ 710.752776][T29755] loop3: detected capacity change from 0 to 262160 [ 710.753583][T29744] __kmalloc+0x6f/0x370 [ 710.753612][T29744] ? alloc_pipe_info+0xc1/0x350 [ 710.769154][T29744] kcalloc+0x32/0x40 [ 710.773093][T29744] alloc_pipe_info+0x1be/0x350 [ 710.777886][T29744] splice_direct_to_actor+0x5f7/0x650 [ 710.783406][T29744] ? security_file_permission+0x7c/0xa0 [ 710.789040][T29744] ? do_splice_direct+0x190/0x190 [ 710.794066][T29744] ? security_file_permission+0x87/0xa0 [ 710.799728][T29744] do_splice_direct+0x106/0x190 [ 710.804613][T29744] do_sendfile+0x675/0xc40 [ 710.809032][T29744] __x64_sys_sendfile64+0x102/0x140 [ 710.814232][T29744] do_syscall_64+0x44/0xd0 [ 710.818666][T29744] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 710.824581][T29744] RIP: 0033:0x7fbf1a39afe9 [ 710.829028][T29744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 710.848894][T29744] RSP: 002b:00007fbf19511168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 710.857405][T29744] RAX: ffffffffffffffda RBX: 00007fbf1a4adf60 RCX: 00007fbf1a39afe9 [ 710.865462][T29744] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 710.873429][T29744] RBP: 00007fbf195111d0 R08: 0000000000000000 R09: 0000000000000000 [ 710.881531][T29744] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 710.889640][T29744] R13: 00007ffd2764166f R14: 00007fbf19511300 R15: 0000000000022000 [ 710.897714][T29744] [ 710.901786][T29757] FAULT_INJECTION: forcing a failure. [ 710.901786][T29757] name failslab, interval 1, probability 0, space 0, times 0 [ 710.914637][T29757] CPU: 0 PID: 29757 Comm: syz-executor.0 Not tainted 5.16.0-syzkaller #0 [ 710.922067][T29755] FAULT_INJECTION: forcing a failure. [ 710.922067][T29755] name failslab, interval 1, probability 0, space 0, times 0 [ 710.923063][T29757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 710.923079][T29757] Call Trace: [ 710.923086][T29757] [ 710.923093][T29757] dump_stack_lvl+0xd6/0x122 [ 710.923122][T29757] dump_stack+0x11/0x1b [ 710.961121][T29757] should_fail+0x23c/0x250 [ 710.965621][T29757] ? kcalloc+0x32/0x50 [ 710.969859][T29757] __should_failslab+0x81/0x90 [ 710.974961][T29757] should_failslab+0x5/0x20 [ 710.979916][T29757] __kmalloc+0x6f/0x370 [ 710.984288][T29757] ? chksum_update+0x39/0x50 [ 710.988890][T29757] kcalloc+0x32/0x50 [ 710.992894][T29757] ext4_find_extent+0x1d5/0x660 [ 710.997829][T29757] ext4_ext_map_blocks+0xee/0x1940 [ 711.003206][T29757] ? _raw_read_unlock+0x13/0x30 [ 711.008380][T29757] ext4_map_blocks+0x183/0xb90 [ 711.013245][T29757] ? should_fail+0x2a/0x250 [ 711.017832][T29757] ext4_iomap_begin+0x147/0x550 [ 711.022805][T29757] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 711.028183][T29757] iomap_iter+0x395/0x4a0 [ 711.032672][T29757] __iomap_dio_rw+0x6f2/0x10b0 [ 711.037543][T29757] iomap_dio_rw+0x38/0x80 [ 711.042070][T29757] ext4_file_read_iter+0x190/0x1f0 [ 711.047358][T29757] generic_file_splice_read+0x24f/0x330 [ 711.052914][T29757] ? splice_shrink_spd+0x60/0x60 [ 711.057985][T29757] splice_direct_to_actor+0x2aa/0x650 [ 711.063480][T29757] ? do_splice_direct+0x190/0x190 [ 711.068570][T29757] do_splice_direct+0x106/0x190 [ 711.073662][T29757] do_sendfile+0x675/0xc40 [ 711.078177][T29757] __x64_sys_sendfile64+0x102/0x140 [ 711.083383][T29757] do_syscall_64+0x44/0xd0 [ 711.087819][T29757] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 711.093771][T29757] RIP: 0033:0x7f661f687fe9 [ 711.098192][T29757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 711.117914][T29757] RSP: 002b:00007f661e7dd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 711.126414][T29757] RAX: ffffffffffffffda RBX: 00007f661f79b030 RCX: 00007f661f687fe9 [ 711.134468][T29757] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 711.142965][T29757] RBP: 00007f661e7dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 711.151041][T29757] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 711.159024][T29757] R13: 00007fffb2da368f R14: 00007f661e7dd300 R15: 0000000000022000 [ 711.167000][T29757] [ 711.170089][T29755] CPU: 1 PID: 29755 Comm: syz-executor.3 Not tainted 5.16.0-syzkaller #0 21:20:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x10600) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, 0x0, 0x0, r0) 21:20:47 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 3) 21:20:47 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 5) [ 711.178552][T29755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 711.188635][T29755] Call Trace: [ 711.191929][T29755] [ 711.194868][T29755] dump_stack_lvl+0xd6/0x122 [ 711.199479][T29755] dump_stack+0x11/0x1b [ 711.203713][T29755] should_fail+0x23c/0x250 [ 711.208170][T29755] ? mempool_alloc_slab+0x16/0x20 [ 711.213205][T29755] __should_failslab+0x81/0x90 [ 711.218067][T29755] should_failslab+0x5/0x20 [ 711.222141][T29765] FAULT_INJECTION: forcing a failure. [ 711.222141][T29765] name failslab, interval 1, probability 0, space 0, times 0 [ 711.222631][T29755] kmem_cache_alloc+0x4f/0x320 [ 711.240189][T29755] ? mempool_alloc_slab+0x16/0x20 [ 711.245368][T29755] mempool_alloc_slab+0x16/0x20 [ 711.250343][T29755] ? mempool_free+0x130/0x130 [ 711.255195][T29755] mempool_alloc+0x9d/0x310 [ 711.259730][T29755] ? __this_cpu_preempt_check+0x18/0x20 [ 711.265369][T29755] ? sysvec_apic_timer_interrupt+0x4a/0xb0 [ 711.271189][T29755] bio_alloc_bioset+0x1af/0x560 [ 711.276121][T29755] __mpage_writepage+0x9eb/0x1060 [ 711.281478][T29755] ? sysvec_apic_timer_interrupt+0x4a/0xb0 [ 711.287489][T29755] write_cache_pages+0x454/0x7f0 [ 711.292676][T29755] ? mpage_writepages+0x130/0x130 [ 711.297761][T29755] ? fat_block_truncate_page+0x30/0x30 [ 711.303244][T29755] mpage_writepages+0x7f/0x130 [ 711.308030][T29755] ? fat_block_truncate_page+0x30/0x30 [ 711.313575][T29755] ? fat_readpage+0x20/0x20 [ 711.318083][T29755] fat_writepages+0x20/0x30 [ 711.322756][T29755] do_writepages+0x1cb/0x330 [ 711.327476][T29755] ? save_fpregs_to_fpstate+0xf5/0x140 [ 711.332939][T29755] filemap_write_and_wait_range+0x1b4/0x340 [ 711.338911][T29755] generic_file_read_iter+0xff/0x320 [ 711.344391][T29755] ? iov_iter_pipe+0x100/0x150 [ 711.349148][T29755] generic_file_splice_read+0x24f/0x330 [ 711.354791][T29755] ? splice_shrink_spd+0x60/0x60 [ 711.359742][T29755] splice_direct_to_actor+0x2aa/0x650 [ 711.365250][T29755] ? do_splice_direct+0x190/0x190 [ 711.370287][T29755] do_splice_direct+0x106/0x190 [ 711.375258][T29755] do_sendfile+0x675/0xc40 [ 711.379798][T29755] __x64_sys_sendfile64+0x102/0x140 [ 711.384998][T29755] do_syscall_64+0x44/0xd0 [ 711.389419][T29755] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 711.395305][T29755] RIP: 0033:0x7f086e3f6fe9 [ 711.399778][T29755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 711.419484][T29755] RSP: 002b:00007f086d56d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 711.427922][T29755] RAX: ffffffffffffffda RBX: 00007f086e509f60 RCX: 00007f086e3f6fe9 [ 711.436436][T29755] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000000014 [ 711.444409][T29755] RBP: 00007f086d56d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 711.452373][T29755] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 711.460530][T29755] R13: 00007ffc0cdc530f R14: 00007f086d56d300 R15: 0000000000022000 [ 711.468677][T29755] [ 711.471690][T29765] CPU: 0 PID: 29765 Comm: syz-executor.0 Not tainted 5.16.0-syzkaller #0 [ 711.480327][T29765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 711.490414][T29765] Call Trace: [ 711.493792][T29765] [ 711.496722][T29765] dump_stack_lvl+0xd6/0x122 [ 711.501454][T29765] dump_stack+0x11/0x1b [ 711.505747][T29765] should_fail+0x23c/0x250 [ 711.510209][T29765] ? __es_insert_extent+0x43d/0xac0 [ 711.515439][T29765] __should_failslab+0x81/0x90 [ 711.520589][T29765] should_failslab+0x5/0x20 [ 711.525206][T29765] kmem_cache_alloc+0x4f/0x320 [ 711.530048][T29765] __es_insert_extent+0x43d/0xac0 [ 711.535625][T29765] ext4_es_insert_extent+0x1bb/0x15c0 [ 711.541284][T29765] ext4_ext_map_blocks+0xbfe/0x1940 [ 711.546615][T29765] ext4_map_blocks+0x183/0xb90 [ 711.551485][T29765] ? should_fail+0x2a/0x250 [ 711.556086][T29765] ext4_iomap_begin+0x147/0x550 [ 711.561052][T29765] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 711.566281][T29765] iomap_iter+0x395/0x4a0 [ 711.570628][T29765] __iomap_dio_rw+0x6f2/0x10b0 [ 711.575745][T29765] iomap_dio_rw+0x38/0x80 [ 711.580102][T29765] ext4_file_read_iter+0x190/0x1f0 [ 711.585332][T29765] generic_file_splice_read+0x24f/0x330 [ 711.590907][T29765] ? splice_shrink_spd+0x60/0x60 [ 711.595953][T29765] splice_direct_to_actor+0x2aa/0x650 [ 711.601401][T29765] ? do_splice_direct+0x190/0x190 [ 711.601676][T29766] FAULT_INJECTION: forcing a failure. [ 711.601676][T29766] name failslab, interval 1, probability 0, space 0, times 0 [ 711.606507][T29765] do_splice_direct+0x106/0x190 [ 711.606601][T29765] do_sendfile+0x675/0xc40 [ 711.606626][T29765] __x64_sys_sendfile64+0x102/0x140 [ 711.606649][T29765] do_syscall_64+0x44/0xd0 [ 711.606670][T29765] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 711.606734][T29765] RIP: 0033:0x7f661f687fe9 [ 711.606751][T29765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 711.606771][T29765] RSP: 002b:00007f661e7fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 711.606793][T29765] RAX: ffffffffffffffda RBX: 00007f661f79af60 RCX: 00007f661f687fe9 [ 711.606807][T29765] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 711.693236][T29765] RBP: 00007f661e7fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 711.701216][T29765] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 711.709192][T29765] R13: 00007fffb2da368f R14: 00007f661e7fe300 R15: 0000000000022000 [ 711.717258][T29765] [ 711.720798][T29766] CPU: 1 PID: 29766 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 711.729237][T29766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 711.740170][T29766] Call Trace: [ 711.743718][T29766] [ 711.746657][T29766] dump_stack_lvl+0xd6/0x122 [ 711.751332][T29766] dump_stack+0x11/0x1b [ 711.755640][T29766] should_fail+0x23c/0x250 [ 711.760069][T29766] ? __iomap_dio_rw+0x143/0x10b0 [ 711.765090][T29766] __should_failslab+0x81/0x90 [ 711.770018][T29766] should_failslab+0x5/0x20 [ 711.774546][T29766] kmem_cache_alloc_trace+0x52/0x350 [ 711.780036][T29766] __iomap_dio_rw+0x143/0x10b0 [ 711.785013][T29766] ? __this_cpu_preempt_check+0x18/0x20 [ 711.790842][T29766] ? sysvec_apic_timer_interrupt+0x4a/0xb0 [ 711.796689][T29766] iomap_dio_rw+0x38/0x80 [ 711.801130][T29766] ext4_file_read_iter+0x190/0x1f0 [ 711.806310][T29766] generic_file_splice_read+0x24f/0x330 [ 711.812047][T29766] ? splice_shrink_spd+0x60/0x60 [ 711.817020][T29766] splice_direct_to_actor+0x2aa/0x650 [ 711.822679][T29766] ? do_splice_direct+0x190/0x190 [ 711.827906][T29766] do_splice_direct+0x106/0x190 [ 711.833146][T29766] do_sendfile+0x675/0xc40 [ 711.837576][T29766] __x64_sys_sendfile64+0x102/0x140 [ 711.842852][T29766] do_syscall_64+0x44/0xd0 [ 711.847413][T29766] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 711.853295][T29766] RIP: 0033:0x7fbf1a39afe9 [ 711.858001][T29766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 711.878473][T29766] RSP: 002b:00007fbf19511168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 711.886971][T29766] RAX: ffffffffffffffda RBX: 00007fbf1a4adf60 RCX: 00007fbf1a39afe9 [ 711.895299][T29766] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 711.903435][T29766] RBP: 00007fbf195111d0 R08: 0000000000000000 R09: 0000000000000000 [ 711.911510][T29766] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 711.919795][T29766] R13: 00007ffd2764166f R14: 00007fbf19511300 R15: 0000000000022000 [ 711.928016][T29766] [ 711.946295][ T1917] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 711.984660][ T1902] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:20:48 executing program 1: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) chdir(0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './bus', [{}, {}], 0xa, "8293a537f79a047e021bf16f2dc20ff58b198a63ef955f9e01824f026db0d8649120a9b98a3fe8f993c86f3a0846bd11f844eae3de94ad865e0b3b7ce6077a910cd774b67d2b19e489170f0a54073ce753cb8b12147259"}, 0x62) r1 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) r3 = dup2(0xffffffffffffffff, r1) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0), 0x10) lseek(r2, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r4, 0x0, 0x10000) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) (async) chdir(0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './bus', [{}, {}], 0xa, "8293a537f79a047e021bf16f2dc20ff58b198a63ef955f9e01824f026db0d8649120a9b98a3fe8f993c86f3a0846bd11f844eae3de94ad865e0b3b7ce6077a910cd774b67d2b19e489170f0a54073ce753cb8b12147259"}, 0x62) (async) creat(0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) creat(&(0x7f0000000100)='./bus\x00', 0x0) (async) ftruncate(r2, 0x800) (async) dup2(0xffffffffffffffff, r1) (async) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0), 0x10) (async) lseek(r2, 0x200, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) (async) sendfile(r2, r4, 0x0, 0x10000) (async) 21:20:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:48 executing program 5: r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000480)="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", 0x1000, 0x5}, {&(0x7f0000000080)="5b661c013db3d2ac5babf435e20381ef7301c2b348d77d967794ac837b864cc7774e8e40c2a93761d0a6b8d7ffa668a895b5ce3a01b06f00a59f46d79eccf4dcfedff0110aa1d7bbdc14764fa306f1", 0x4f}, {&(0x7f0000000200)="47b9c617000c9ce7a4fc995980cae4968e66ed72995fa6a3779371c3ad1ba964027cfebae6b96e43b620c9ad01347b122535a2a999c698ef74344ea724dc5ba959930100165172076ef5b021c6f664aec0ea8b2037e6dd7d525732a8cf93e9f301e6d39f17a439e08d20fdc803b1e41d617254709c9672c240617d343dddf91ddfebf7d48508c134854072d5cced8f0af31cbb6e9459bc9feea45de746", 0x9d, 0x3}, {&(0x7f0000001480)="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", 0x1000, 0x3f}], 0x408, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './bus\x00'}) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r1, 0x0) (async) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) (async) lseek(r2, 0x200, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) sendfile(r2, r3, 0x0, 0x10000) 21:20:48 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 4) 21:20:48 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 712.218236][T29780] loop5: detected capacity change from 0 to 8 [ 712.222923][T29781] FAULT_INJECTION: forcing a failure. [ 712.222923][T29781] name failslab, interval 1, probability 0, space 0, times 0 [ 712.224943][T29779] loop3: detected capacity change from 0 to 262160 [ 712.237081][T29781] CPU: 1 PID: 29781 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 712.251969][T29781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 712.262023][T29781] Call Trace: [ 712.265294][T29781] [ 712.268214][T29781] dump_stack_lvl+0xd6/0x122 [ 712.272811][T29781] dump_stack+0x11/0x1b [ 712.277067][T29781] should_fail+0x23c/0x250 [ 712.281501][T29781] ? kcalloc+0x32/0x50 [ 712.285577][T29781] __should_failslab+0x81/0x90 [ 712.290371][T29781] should_failslab+0x5/0x20 [ 712.295003][T29781] __kmalloc+0x6f/0x370 [ 712.299159][T29781] kcalloc+0x32/0x50 [ 712.303068][T29781] ext4_find_extent+0x1d5/0x660 [ 712.307914][T29781] ext4_ext_map_blocks+0xee/0x1940 [ 712.313106][T29781] ? _raw_read_unlock+0x13/0x30 [ 712.317971][T29781] ext4_map_blocks+0x183/0xb90 [ 712.322747][T29781] ext4_iomap_begin+0x147/0x550 [ 712.327706][T29781] ? sysvec_apic_timer_interrupt+0x4a/0xb0 [ 712.333608][T29781] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 712.339766][T29781] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 712.344973][T29781] iomap_iter+0x395/0x4a0 [ 712.349382][T29781] __iomap_dio_rw+0x6f2/0x10b0 [ 712.354199][T29781] ? perf_output_begin_forward+0x4fb/0x5b0 [ 712.360018][T29781] iomap_dio_rw+0x38/0x80 [ 712.364526][T29781] ext4_file_read_iter+0x190/0x1f0 [ 712.369705][T29781] generic_file_splice_read+0x24f/0x330 [ 712.375420][T29781] ? splice_shrink_spd+0x60/0x60 [ 712.380465][T29781] splice_direct_to_actor+0x2aa/0x650 [ 712.385873][T29781] ? do_splice_direct+0x190/0x190 [ 712.391082][T29781] do_splice_direct+0x106/0x190 [ 712.395929][T29781] do_sendfile+0x675/0xc40 [ 712.400427][T29781] __x64_sys_sendfile64+0x102/0x140 [ 712.405626][T29781] do_syscall_64+0x44/0xd0 [ 712.410037][T29781] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 712.415998][T29781] RIP: 0033:0x7fbf1a39afe9 [ 712.420405][T29781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 712.440038][T29781] RSP: 002b:00007fbf19511168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 712.448447][T29781] RAX: ffffffffffffffda RBX: 00007fbf1a4adf60 RCX: 00007fbf1a39afe9 [ 712.456412][T29781] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 21:20:48 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 5) 21:20:48 executing program 5: r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000480)="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", 0x1000, 0x5}, {&(0x7f0000000080)="5b661c013db3d2ac5babf435e20381ef7301c2b348d77d967794ac837b864cc7774e8e40c2a93761d0a6b8d7ffa668a895b5ce3a01b06f00a59f46d79eccf4dcfedff0110aa1d7bbdc14764fa306f1", 0x4f}, {&(0x7f0000000200)="47b9c617000c9ce7a4fc995980cae4968e66ed72995fa6a3779371c3ad1ba964027cfebae6b96e43b620c9ad01347b122535a2a999c698ef74344ea724dc5ba959930100165172076ef5b021c6f664aec0ea8b2037e6dd7d525732a8cf93e9f301e6d39f17a439e08d20fdc803b1e41d617254709c9672c240617d343dddf91ddfebf7d48508c134854072d5cced8f0af31cbb6e9459bc9feea45de746", 0x9d, 0x3}, {&(0x7f0000001480)="8edb4169f3a46068f983d43cf361fc92c7e9e624cd9b7fa339c52e8608263b23d0d057242a053bd1722dbb59eeed46c01a6f2ced5f12545c54f914ea9a665a9344757071a5aa8fa95d83735a0c4eee265075da08f51fcd2c64ad884d7b4bde6138bd9801e701b273d75c55c65a5e0f6f3479907344924b16dc4b6f5ed253175699d5679b1d29a51d2046de7a3f050a354ef65d41aabbbf2cf87378d823ad3947cea0b12689f885d8b10b38ce21ebc19adecc1164e69fff5080873752cde3d4b6f6e3b0293ae33c0c18f83f3ca076a0ff6b3581636fff95a5e184a782529982b4ff14e2e43923cc672458af62bb9047643b37c128255ff96cc554460f127263ed78a71e2ef513d80863c4587933f14f68a2463b9131600011c70f27a563ec9feb91d29144b5eb5d78e6af8bf401af169777d11f128a495e33db347e9cddd661fda913b552d450d813927fff2cc897a8e4778f278c8b793787cf5bea5c178c75179b39c5356f11210adf375ae3f97080c165baac0b02a9b4fb4a54f2cd5a06e18bf5814107c2d2d20dc014ad3f048b2b17fd027dfd50ec64a7ce9046841986dda90242d35c209acdc9cdcf2f55ec9afcdd4dbfc5658531cb977b27a87f88e803c2a77ab3b56080f97f1b651dc6b9ba566d169d8727bcaca6e928c15d42b89e3186b9d978378338ad97da5d97cdb7f4431c7a9703571888caf043800109f5bd645db5ad3f301ed580bf622a0306f99e939bd45524708627bba89b4db759600790660cdb26c9b12e12e42e28827b16008311aed2330f79f2c85695c59a83c887b7d7ccfc1191e85637ee3ecf51390a72301e9d98b7123a1b375e00656563e0376036c0b8f91a31ece1300ba497debd131f3c01815e93d1efb55ad00dbd630a34935192bcded7113e7a262806aee1baa1c7fcfa216ea11a162f2706d4ff48a55f1e6f8c6d7323a7e095c12b42eb53d208ac2e1edc4bc87beec73277561daaa0cbfc349ae6c0ac6638a4a2f4d1ee02de9757383c37eef747ac97d6ca8ac3f019d111ef437d38a45162cac730063c9d47c3d4807d161a22f24365a50a5235bb7af13c11bc2bbe8c4f9e617bfc7b4e23f4b757422ac61126d01d2501469a7cd0e9cd548a7e847e5f54c234d4a1da8958d00006fc9b8d3e95c846d4f469d6abd51598b4822590b66d324559edaf4528561310ebf20f8d2537f0e1c2fc4284de63ac6e5fa8c6bbc7ac2513239b2258de99542fa0037cfb492a7b31fea940324afbcb5cfeb00e93c5137e2e679b0a5c02bf1220cb0a23b1cf69216f72565ba7a28cb81c9e700faf7443f1f229c1a70600c7df4d4396ffb4faff9cde67651d169e02e047204767e412bbda9cf9a669d23a161b218c61ee47f2c3551b34eff7e79f4909bf234dba7d3fb0ca1ab957ea78cac87b44e80ef1c07a8890b5099858778b5523256cd7c350723bbcc00d33743aa7225577ce8ad1819143be1a35dda3a5fbd60bf87affbddd7c72a6c99c40676460368b3f3a6a2706ac3a0bfbac5c95ff1d42f70287bfd514c4c2ce75ddae5100a462c958b42f1a28e7cef6fd369d6db04e1e13786ea0a04ebd430c71a12527458ad8013f0934feeb2c4dd4e1bcbee8dab23ea0e496acdea3c4fb598d162dd2c2ae60fb4e6eac8242a33f064785fc61a4dfcb46c9f898073542b7bf585db026ace1adfee93b3c09c7c2af5e28512a260d69e0ff3f84044ef9cf2bec7e0f730ab4f45b15ff8322c9c577e3aa8ff7c9b42635444aae721f1dcd1e0302d0425cf5a5c95aead0bc1d6f281e59c7fa41c02be9c06f279ab4757c65e42169267735db43cb5d5ed0538bb30f19ee2a84f2858991e448ed52ab6970912df87c62bd2aaf91a8d96e6330b636acd5c41f3d9f67cb2a547a079d2f7ee760aafd9dd6c3dc63d19c6506cb8204d6f036b706341ae80186bb1f54066a715bd8b5366d58783318bcd443d56bbb9867b2748d603173e8bfa31674a556c988b87c4a811009b65d997232833fa7e0323a1d388d422d817f037e97c3f8b0d1943d38afd6846035344289fbf3db31bc07252c6c33998255a03405108d1b5e9201f7d173e8c281c3738305a6bd109f4301ff98244a5cea284fa654b0c0b814af92b58ed9f612112b0125b7e5476516b995d0ed373f7374269d03983182778941cccde36b104cf0bce8c72cb09fbd6b31b42976648100d08c944b7945aba57e18bb6fc6caf48b232a5b57c4a7ff697ab39ab062558314b051b4114edbb19991b0ea34755ca0ded89489e095f2d0beefab213e62e93bb3a76f1b54ef27bf8a73a24655492cf37813678f22a9a9119622903bf2ed1b7351a3351cd81392df3b506a7975e4251a57fd72da4c20d9a2b4e0c0f18f64b7567cbc664c5cb6b52985c667b646ffe0070320dbd27fa8e0611caddfebbd2507a6d3bbfda2e591a70e6c49d25d55e36f78a53aa77ce6bedd12cd259290ec241f48c97e40ac4e354446a2a64b22a4c4947dd87217fb1154b4ab0f27c032d458cde03d970e8da605822b115daec0ca13a4f698d0244d4ae545306bb2c54a938f93c9389e1be3f5310dafdf426f7fadf9a150ff0f44964940d45bab29a0e181e7a9758482eddf828d08f2aedb99d168cf665754560d475adaa8c68155af1f1353cf249b2099c072a0051a6a73652887238452612adc4a5e1f4d8590ddff56556e3756776a98f12007f19663428c01cc20e598d60ecde4ad80ed01436b06a1254ba84458f6653e04a09be13fe35ea8513a62542c3f99ca1df81cbbf508ca3da77cb7e63b1e09dd593bc73567861e3bc3735b74fe4cef165eb9d47d7a27e13a10c971d0aa18226720fd32836896ae4b0d37a52f5180dcd91e80b983ee83d9863fdd52d6aa5af21b79a818ad5ce1bbfd6b842f524072cb5116a1f95e5dcd64d4ec36473d79ee7058525a72618efdb4bd1c0777554bfc119ee99cee1d4e22436f18d144fe3b285feaeaf9008d6f5bbb56705addbb87af84129767d56d08677169be9f0fd9cb7bf410df8c5c204fc2217c037f631c15570960ec2340c2859b278e9eeba48423eebe27c3a4cbf204a8996f1c2062c27aa2c6f0b5c8075a1116dd3c6421a4fa4827c3df3389318692f3563b1682ec871ded8045d4f77059d0eb059d0a3a7515fc9c5aedb945b8a62f984e1f86d3702ff9a3ad2c86024c5d57f7c11128dfe7ad183468c729f1990fcde4a1571f35e4c8ce1df26e88f99fe66329883dafc58d21ebb7cc3990d3aa3f4a55391f8520e455f7862d71c35a09345b3bcc7822722b020e3e15b0e2beb065a8302ab9b75cafec78206a56162f6c3f87218ea0e13b4f41d48ba860d42ee391c49a44e733ad4e1c715223703e9fa410b42f8d90af3e3a1b52963c2a181993e6cbb7283b7d6296a7aaefc83ef625bcc8d2150db40c96499cba303bff91f9d31f04f51bd488403ca4946784086898ff771ca5891a56c695e6456782487dbebbb636aae7450cca79f850556e1eb9db4fb2db4112698ee6a687a8b6adf3e6d912dbcd35138cc08f8dd73fd8e6b90d06cb48842eefa48ebe2ae89a9294ce337799af9fe4f98e320e77bdbce518164817f2dc7bd485c6a3c77a3dbf335bf70f23dbdfcac2d1d977121aba618581e931ac8fa0471493e19c3d062073006486ac8a8f71bb7a7790ec7ee7294ffd54746ab63c2a8d8a6a3a83282c59049a888a5449b2d5d6356c9bd8866ba1c1b165c7e18db1d1149d2184c48683f977636e9d19564d01f1702df815de917b8d1ee753cc1278f1b32f8b1472c4a00f951b481a9968864bc686d229bc83ec9498ccce249b80172142476434a6cc3f77ccf3526e0169256ed2d8fbfa7534811d96ca7919b0522cc31da714a6e51ba4447344664daa16fc9f75fdbe16e8f102bbdfb1169a17269b9877f4c4b1786413b0c5fe00aa5dd9f9cff01d9e0cc4f180a48b60824a973bd2aac67c215db0d608bfe47fc44b9f799d85cfd10f9c498f4f982a40792fef807dabcad05fdc14ed271657bc723b2fea53bf38963419b50c6c00c3202cea89f9e8e7697c8c9f6fd32bff5eb7c57e6503c60a0f2ee1897068f1fb76f7091184f33016fe5e731c6166a857598deaf59b8bccfb264ebda6a5a9db7a80a4d531f7238ba83dbee94f6b40e19fbaa3cfc9127d782021dee9437121b0183000725f4a05a80e6d5427b4650bc5c01f412ca3527e11dcbc872f98e1f5e9b0caf064900ea679da9e6069ab38b04fd4b3d3f492334438f77b45e291087cc34e343b825c7267deceb482b2caac318ebceb1ab0a794ea46a08d93c94df2b408a818490668425c5016757a38f5d25ad8c60b0da8000852f10855aec22d2729cf5815529d7e27ee2c78c7e23b9d82ef16f74ed8336009015b4ae1dd5c206ca1c566ee3d758042fa32d8ed283ac3d8dff5069258ef606223a887cb620bbeade790e7e576cd0d9558df41de95f58451eba6b02fd2ef18345fd2fbd8d038eb2e7b210adcda771ba22a2c1410ba3059e3abc94e7ae42a82bc86944623b44ed5ce526a309d0e1739804fa805aa8b186c6c9e7ab5b3b98bc6a8fddb7e44daf0ff3bd0ac877184080d31044f267add0cf41e65ef6014388d7de75ba76b4acb587e8ac92bddf39a27c1a4ab35ec26065a5556a98c58697c561cc4f9b3a45587ac6e4e98c62688ba3e4c28ab0c89e8f2c87019312cd59b6ab807d268cb23ee7075ad2954776e908526595235160faf6954a848cc6e429d7ba04895238da27685f8248f85abf5a965724a86a49ad33fa68fd4857f528a65efe7d25a3cca23f68c34ffb55984806615a3869b34ce6e04ecbfbb95b5a77467a9c26c8632deaf13ee323e13a183d0f0a801de99b10b9dcb38ad4dd9559178c64f16a706f6ea65ab45d4e56650ac8d6fa7cfb47ba46efec3af53bea8fa52c8e8628d7d3d4659b7348c1589d55d99f1acbcca10b9d913d9ddb7f65166e42705145c7aa399fe0076753784b19dfae06f04ea6a85a07304e429331bc4bf6b69e580c3633a3e1dcc56ca104acc7606c1bc59dbdca0226c0721f97d3c12791459e568b55e90ca3988c810188baa6602e2f7c5fffbc7ae4c426a83581cad5d78292a4285185a9d8b2c915592fb5d240b1aa37e20d713af74f242242850a5551e42970f5a0d0634cc45276609f381898e276ad46c582a2fab523f9e2e8106598d1f908d0f15abd98d3c231cc619e7e5640ebcc70528e95bb3aba5924f8cb52e2a98d1a824080ae0f4fced7a285919ee9ebc80b53bcf58a138ced78de508acc55b563fe65f0731d8242c3960cf6d01a538e1373fb56f22d61d88384d2a1067747b0ec8c39bd5fe6f8cd4eca915a325cc87ee03e08c781dcec5121030a590685d67495b542f6c260b34ba27987708e917299c07f498fde489e62277e2e37db66af1bc7476e4a1849efdeb4bfbe97c78e2269bcb6a70c38f941a6002a61d0caa0f5562f730537ce22255b78d36dcd6a67789551cc56a47bd05d2775398afe75106b0648420d43c9c0c631847cad1969f3d1c44cb514ea635b241562e1a2e7a0db3b663c3d48d742a92fbce41b013dbaa5bd0fcb015b46868e1ef9ceb8d716f62b354a6ab37684dbd0de955212b8b731c3ad91f42361b6f8faf7ac73c9409fcde98412922709d0e2a956c5cc464c2e5be054adcbd5589e6a265a6923026208b02b74cad49e10122f655b4cd9c277f682408f74cff71c57a6eb07b29a02556627c7b5effb453f7337e13b82bbd56048bf6b90af5b90223e3e7ca7a337dd6ec36b1e469f2846981153a2ae39e5703f86c52", 0x1000, 0x3f}], 0x408, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './bus\x00'}) (rerun: 32) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) (async) lseek(r2, 0x200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendfile(r2, r3, 0x0, 0x10000) [ 712.464477][T29781] RBP: 00007fbf195111d0 R08: 0000000000000000 R09: 0000000000000000 [ 712.472446][T29781] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 712.480460][T29781] R13: 00007ffd2764166f R14: 00007fbf19511300 R15: 0000000000022000 [ 712.488427][T29781] [ 712.562256][T29788] FAULT_INJECTION: forcing a failure. [ 712.562256][T29788] name failslab, interval 1, probability 0, space 0, times 0 [ 712.575248][T29788] CPU: 1 PID: 29788 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 712.583656][T29788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 712.593788][T29788] Call Trace: [ 712.597255][T29788] [ 712.600179][T29788] dump_stack_lvl+0xd6/0x122 [ 712.604804][T29788] dump_stack+0x11/0x1b [ 712.608969][T29788] should_fail+0x23c/0x250 [ 712.613376][T29788] ? __es_insert_extent+0x43d/0xac0 [ 712.618719][T29788] __should_failslab+0x81/0x90 [ 712.623619][T29788] should_failslab+0x5/0x20 [ 712.628171][T29788] kmem_cache_alloc+0x4f/0x320 [ 712.632993][T29788] __es_insert_extent+0x43d/0xac0 [ 712.638095][T29788] ext4_es_insert_extent+0x1bb/0x15c0 [ 712.643613][T29788] ext4_ext_map_blocks+0xbfe/0x1940 [ 712.648881][T29788] ext4_map_blocks+0x183/0xb90 [ 712.653824][T29788] ? kvm_sched_clock_read+0x15/0x40 [ 712.659157][T29788] ? sched_clock_cpu+0xe/0x1a0 [ 712.664015][T29788] ? rb_insert_color+0x7e/0x310 [ 712.668863][T29788] ext4_iomap_begin+0x147/0x550 [ 712.673875][T29788] ? enqueue_hrtimer+0x6f/0x130 [ 712.678766][T29788] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 712.683956][T29788] iomap_iter+0x395/0x4a0 [ 712.688299][T29788] __iomap_dio_rw+0x6f2/0x10b0 [ 712.693067][T29788] iomap_dio_rw+0x38/0x80 [ 712.697583][T29788] ext4_file_read_iter+0x190/0x1f0 [ 712.702741][T29788] generic_file_splice_read+0x24f/0x330 [ 712.708348][T29788] ? splice_shrink_spd+0x60/0x60 [ 712.713329][T29788] splice_direct_to_actor+0x2aa/0x650 [ 712.718743][T29788] ? do_splice_direct+0x190/0x190 [ 712.723778][T29788] do_splice_direct+0x106/0x190 [ 712.728685][T29788] do_sendfile+0x675/0xc40 [ 712.733086][T29788] __x64_sys_sendfile64+0x102/0x140 [ 712.738287][T29788] do_syscall_64+0x44/0xd0 [ 712.742714][T29788] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 712.748685][T29788] RIP: 0033:0x7fbf1a39afe9 [ 712.753115][T29788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 712.772724][T29788] RSP: 002b:00007fbf19511168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 712.781925][T29788] RAX: ffffffffffffffda RBX: 00007fbf1a4adf60 RCX: 00007fbf1a39afe9 [ 712.789941][T29788] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 712.798033][T29788] RBP: 00007fbf195111d0 R08: 0000000000000000 R09: 0000000000000000 [ 712.806103][T29788] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 712.814157][T29788] R13: 00007ffd2764166f R14: 00007fbf19511300 R15: 0000000000022000 [ 712.822280][T29788] 21:20:49 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r1, r2, 0x0, 0x10000) 21:20:49 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) chdir(0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='hugetlbfs\x00', 0x1801000, &(0x7f0000000300)=',-$\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) fcntl$lock(r3, 0x5, &(0x7f0000000140)={0x1, 0x3, 0x200, 0x4, r4}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x17, &(0x7f0000000200)=[{0x9, 0x8, 0x55, 0x6}, {0x8001, 0x1, 0xd8, 0xffff}, {0x3, 0x42, 0x4, 0xff}, {0x1, 0x8, 0x5, 0x88}, {0x0, 0x0, 0xc1, 0x5e8e}, {0x2, 0x4, 0x0, 0x9}, {0x800, 0x2, 0x3, 0x7}, {0x7, 0x1f, 0x84, 0x94b}, {0x751, 0x7, 0x0, 0xfffffffe}, {0x3f, 0x7, 0x3, 0x40}]}, 0x10) sendfile(r2, r1, 0x0, 0x1ff) [ 712.857143][ T4377] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 712.872445][T29803] loop5: detected capacity change from 0 to 8 [ 712.874192][ T4377] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 712.953852][ T1917] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 712.980352][ T24] audit: type=1400 audit(1642713649.335:367): avc: denied { lock } for pid=29808 comm="syz-executor.1" path="socket:[89667]" dev="sockfs" ino=89667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 21:20:49 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x489) 21:20:49 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) chdir(0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='hugetlbfs\x00', 0x1801000, &(0x7f0000000300)=',-$\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) fcntl$lock(r3, 0x5, &(0x7f0000000140)={0x1, 0x3, 0x200, 0x4, r4}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x17, &(0x7f0000000200)=[{0x9, 0x8, 0x55, 0x6}, {0x8001, 0x1, 0xd8, 0xffff}, {0x3, 0x42, 0x4, 0xff}, {0x1, 0x8, 0x5, 0x88}, {0x0, 0x0, 0xc1, 0x5e8e}, {0x2, 0x4, 0x0, 0x9}, {0x800, 0x2, 0x3, 0x7}, {0x7, 0x1f, 0x84, 0x94b}, {0x751, 0x7, 0x0, 0xfffffffe}, {0x3f, 0x7, 0x3, 0x40}]}, 0x10) sendfile(r2, r1, 0x0, 0x1ff) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) (async) chdir(0x0) (async) creat(0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='hugetlbfs\x00', 0x1801000, &(0x7f0000000300)=',-$\x00') (async) creat(&(0x7f0000000100)='./bus\x00', 0x0) (async) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) (async) fcntl$lock(r3, 0x5, &(0x7f0000000140)={0x1, 0x3, 0x200, 0x4, r4}) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x17, &(0x7f0000000200)=[{0x9, 0x8, 0x55, 0x6}, {0x8001, 0x1, 0xd8, 0xffff}, {0x3, 0x42, 0x4, 0xff}, {0x1, 0x8, 0x5, 0x88}, {0x0, 0x0, 0xc1, 0x5e8e}, {0x2, 0x4, 0x0, 0x9}, {0x800, 0x2, 0x3, 0x7}, {0x7, 0x1f, 0x84, 0x94b}, {0x751, 0x7, 0x0, 0xfffffffe}, {0x3f, 0x7, 0x3, 0x40}]}, 0x10) (async) sendfile(r2, r1, 0x0, 0x1ff) (async) 21:20:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x493) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:49 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x600) 21:20:49 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa00) 21:20:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x600) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 713.133550][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:20:49 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc00) [ 713.173861][T29834] loop3: detected capacity change from 0 to 262160 [ 713.314038][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:20:49 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 21:20:49 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xe00) 21:20:49 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) chdir(0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='hugetlbfs\x00', 0x1801000, &(0x7f0000000300)=',-$\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) fcntl$lock(r3, 0x5, &(0x7f0000000140)={0x1, 0x3, 0x200, 0x4, r4}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x17, &(0x7f0000000200)=[{0x9, 0x8, 0x55, 0x6}, {0x8001, 0x1, 0xd8, 0xffff}, {0x3, 0x42, 0x4, 0xff}, {0x1, 0x8, 0x5, 0x88}, {0x0, 0x0, 0xc1, 0x5e8e}, {0x2, 0x4, 0x0, 0x9}, {0x800, 0x2, 0x3, 0x7}, {0x7, 0x1f, 0x84, 0x94b}, {0x751, 0x7, 0x0, 0xfffffffe}, {0x3f, 0x7, 0x3, 0x40}]}, 0x10) sendfile(r2, r1, 0x0, 0x1ff) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) (async) chdir(0x0) (async) creat(0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='hugetlbfs\x00', 0x1801000, &(0x7f0000000300)=',-$\x00') (async) creat(&(0x7f0000000100)='./bus\x00', 0x0) (async) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) (async) fcntl$lock(r3, 0x5, &(0x7f0000000140)={0x1, 0x3, 0x200, 0x4, r4}) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x17, &(0x7f0000000200)=[{0x9, 0x8, 0x55, 0x6}, {0x8001, 0x1, 0xd8, 0xffff}, {0x3, 0x42, 0x4, 0xff}, {0x1, 0x8, 0x5, 0x88}, {0x0, 0x0, 0xc1, 0x5e8e}, {0x2, 0x4, 0x0, 0x9}, {0x800, 0x2, 0x3, 0x7}, {0x7, 0x1f, 0x84, 0x94b}, {0x751, 0x7, 0x0, 0xfffffffe}, {0x3f, 0x7, 0x3, 0x40}]}, 0x10) (async) sendfile(r2, r1, 0x0, 0x1ff) (async) 21:20:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xa00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:49 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r1, r2, 0x0, 0x10000) 21:20:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:49 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1200) 21:20:49 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1400) 21:20:49 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) chdir(0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='hugetlbfs\x00', 0x1801000, &(0x7f0000000300)=',-$\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) fcntl$lock(r3, 0x5, &(0x7f0000000140)={0x1, 0x3, 0x200, 0x4, r4}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x17, &(0x7f0000000200)=[{0x9, 0x8, 0x55, 0x6}, {0x8001, 0x1, 0xd8, 0xffff}, {0x3, 0x42, 0x4, 0xff}, {0x1, 0x8, 0x5, 0x88}, {0x0, 0x0, 0xc1, 0x5e8e}, {0x2, 0x4, 0x0, 0x9}, {0x800, 0x2, 0x3, 0x7}, {0x7, 0x1f, 0x84, 0x94b}, {0x751, 0x7, 0x0, 0xfffffffe}, {0x3f, 0x7, 0x3, 0x40}]}, 0x10) sendfile(r2, r1, 0x0, 0x1ff) [ 713.495448][T29850] loop3: detected capacity change from 0 to 262160 21:20:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:20:49 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1600) 21:20:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xc00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 713.591773][T29880] loop1: detected capacity change from 0 to 262160 [ 713.634575][ T4377] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 713.652314][T29880] FAULT_INJECTION: forcing a failure. [ 713.652314][T29880] name failslab, interval 1, probability 0, space 0, times 0 [ 713.665517][T29880] CPU: 1 PID: 29880 Comm: syz-executor.1 Not tainted 5.16.0-syzkaller #0 [ 713.673996][T29880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 713.684100][T29880] Call Trace: [ 713.687476][T29880] [ 713.690520][T29880] dump_stack_lvl+0xd6/0x122 [ 713.695138][T29880] dump_stack+0x11/0x1b [ 713.699441][T29880] should_fail+0x23c/0x250 [ 713.703943][T29880] ? alloc_pipe_info+0xac/0x350 [ 713.709355][T29880] __should_failslab+0x81/0x90 [ 713.714186][T29880] should_failslab+0x5/0x20 [ 713.718792][T29880] kmem_cache_alloc_trace+0x52/0x350 [ 713.724081][T29880] alloc_pipe_info+0xac/0x350 [ 713.728766][T29880] splice_direct_to_actor+0x5f7/0x650 [ 713.734416][T29880] ? security_file_permission+0x7c/0xa0 [ 713.740058][T29880] ? do_splice_direct+0x190/0x190 [ 713.745095][T29880] ? security_file_permission+0x87/0xa0 [ 713.750970][T29880] do_splice_direct+0x106/0x190 [ 713.755868][T29880] do_sendfile+0x675/0xc40 [ 713.760360][T29880] __x64_sys_sendfile64+0x102/0x140 [ 713.765609][T29880] do_syscall_64+0x44/0xd0 [ 713.770024][T29880] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 713.775916][T29880] RIP: 0033:0x7fde3e25afe9 [ 713.780482][T29880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 713.800497][T29880] RSP: 002b:00007fde3d3d1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 713.808998][T29880] RAX: ffffffffffffffda RBX: 00007fde3e36df60 RCX: 00007fde3e25afe9 [ 713.817093][T29880] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 713.825332][T29880] RBP: 00007fde3d3d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 713.833442][T29880] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 713.841433][T29880] R13: 00007ffdfc4f7eef R14: 00007fde3d3d1300 R15: 0000000000022000 [ 713.849500][T29880] [ 713.914519][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:20:50 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x495) 21:20:50 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async, rerun: 32) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r1, r2, 0x0, 0x10000) 21:20:50 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1800) 21:20:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xe00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:20:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 714.035740][T29891] loop1: detected capacity change from 0 to 262160 [ 714.045386][T29893] loop3: detected capacity change from 0 to 262160 [ 714.082660][T29891] FAULT_INJECTION: forcing a failure. [ 714.082660][T29891] name failslab, interval 1, probability 0, space 0, times 0 [ 714.095769][T29891] CPU: 0 PID: 29891 Comm: syz-executor.1 Not tainted 5.16.0-syzkaller #0 [ 714.104200][T29891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 714.114361][T29891] Call Trace: [ 714.117667][T29891] [ 714.120603][T29891] dump_stack_lvl+0xd6/0x122 [ 714.125202][T29891] dump_stack+0x11/0x1b [ 714.129449][T29891] should_fail+0x23c/0x250 [ 714.134072][T29891] ? kcalloc+0x32/0x40 [ 714.138193][T29891] __should_failslab+0x81/0x90 [ 714.142954][T29891] should_failslab+0x5/0x20 [ 714.147636][T29891] __kmalloc+0x6f/0x370 [ 714.151889][T29891] ? kmem_cache_alloc_trace+0x24b/0x350 [ 714.157914][T29891] kcalloc+0x32/0x40 [ 714.161811][T29891] alloc_pipe_info+0x1be/0x350 [ 714.166672][T29891] splice_direct_to_actor+0x5f7/0x650 [ 714.172049][T29891] ? security_file_permission+0x7c/0xa0 [ 714.177657][T29891] ? do_splice_direct+0x190/0x190 [ 714.182691][T29891] ? security_file_permission+0x87/0xa0 [ 714.188331][T29891] do_splice_direct+0x106/0x190 [ 714.193384][T29891] do_sendfile+0x675/0xc40 [ 714.197820][T29891] __x64_sys_sendfile64+0x102/0x140 [ 714.203120][T29891] do_syscall_64+0x44/0xd0 [ 714.207542][T29891] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 714.214192][T29891] RIP: 0033:0x7fde3e25afe9 [ 714.219139][T29891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 714.238941][T29891] RSP: 002b:00007fde3d3d1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 714.247458][T29891] RAX: ffffffffffffffda RBX: 00007fde3e36df60 RCX: 00007fde3e25afe9 [ 714.255693][T29891] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 714.263920][T29891] RBP: 00007fde3d3d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 714.271946][T29891] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 21:20:50 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x600) 21:20:50 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1a00) 21:20:50 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xa00) 21:20:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 714.279918][T29891] R13: 00007ffdfc4f7eef R14: 00007fde3d3d1300 R15: 0000000000022000 [ 714.287982][T29891] 21:20:50 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1c00) 21:20:50 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xc00) 21:20:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1200) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 714.353800][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 714.355688][T29912] loop1: detected capacity change from 0 to 262160 [ 714.384127][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 714.394029][ T1917] Buffer I/O error on dev loop1, logical block 32752, async page read [ 714.448379][T29912] FAULT_INJECTION: forcing a failure. [ 714.448379][T29912] name failslab, interval 1, probability 0, space 0, times 0 [ 714.461427][T29912] CPU: 0 PID: 29912 Comm: syz-executor.1 Not tainted 5.16.0-syzkaller #0 [ 714.470052][T29912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 714.481027][T29912] Call Trace: [ 714.484402][T29912] [ 714.487426][T29912] dump_stack_lvl+0xd6/0x122 [ 714.492036][T29912] dump_stack+0x11/0x1b [ 714.496225][T29912] should_fail+0x23c/0x250 [ 714.500656][T29912] ? mempool_alloc_slab+0x16/0x20 [ 714.505711][T29912] __should_failslab+0x81/0x90 [ 714.510480][T29912] should_failslab+0x5/0x20 [ 714.515040][T29912] kmem_cache_alloc+0x4f/0x320 [ 714.520088][T29912] mempool_alloc_slab+0x16/0x20 [ 714.524998][T29912] ? mempool_free+0x130/0x130 [ 714.529674][T29912] mempool_alloc+0x9d/0x310 [ 714.534179][T29912] ? __this_cpu_preempt_check+0x18/0x20 [ 714.539745][T29912] ? sysvec_apic_timer_interrupt+0x4a/0xb0 [ 714.545653][T29912] bio_alloc_bioset+0xcc/0x560 [ 714.550417][T29912] ? __mpage_writepage+0x653/0x1060 [ 714.555624][T29912] __mpage_writepage+0x9eb/0x1060 [ 714.560695][T29912] write_cache_pages+0x454/0x7f0 [ 714.565725][T29912] ? mpage_writepages+0x130/0x130 [ 714.570749][T29912] ? fat_block_truncate_page+0x30/0x30 [ 714.576394][T29912] mpage_writepages+0x7f/0x130 [ 714.581186][T29912] ? fat_block_truncate_page+0x30/0x30 [ 714.586646][T29912] ? fat_readpage+0x20/0x20 [ 714.591190][T29912] fat_writepages+0x20/0x30 [ 714.595715][T29912] do_writepages+0x1cb/0x330 [ 714.600299][T29912] ? __this_cpu_preempt_check+0x18/0x20 [ 714.605861][T29912] ? sysvec_apic_timer_interrupt+0x4a/0xb0 [ 714.611663][T29912] filemap_write_and_wait_range+0x1b4/0x340 [ 714.617695][T29912] generic_file_read_iter+0xff/0x320 [ 714.623051][T29912] ? iov_iter_pipe+0x100/0x150 [ 714.627941][T29912] generic_file_splice_read+0x24f/0x330 [ 714.633486][T29912] ? splice_shrink_spd+0x60/0x60 [ 714.638538][T29912] splice_direct_to_actor+0x2aa/0x650 [ 714.643985][T29912] ? do_splice_direct+0x190/0x190 [ 714.649004][T29912] do_splice_direct+0x106/0x190 [ 714.653872][T29912] do_sendfile+0x675/0xc40 [ 714.658295][T29912] __x64_sys_sendfile64+0x102/0x140 [ 714.663552][T29912] do_syscall_64+0x44/0xd0 [ 714.668104][T29912] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 714.674104][T29912] RIP: 0033:0x7fde3e25afe9 [ 714.678588][T29912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 714.698555][T29912] RSP: 002b:00007fde3d3d1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 714.707070][T29912] RAX: ffffffffffffffda RBX: 00007fde3e36df60 RCX: 00007fde3e25afe9 [ 714.715202][T29912] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 714.723266][T29912] RBP: 00007fde3d3d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 714.731229][T29912] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 714.739435][T29912] R13: 00007ffdfc4f7eef R14: 00007fde3d3d1300 R15: 0000000000022000 [ 714.747496][T29912] 21:20:51 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./bus\x00', 0x1}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@ah={{0x30}}, @common=@icmp={{0x28}, {0x0, "401f"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r1, r2, 0x0, 0x10000) 21:20:51 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xe00) 21:20:51 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1e00) 21:20:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1400) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:51 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2000) 21:20:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:20:51 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1200) [ 714.953762][T29928] loop3: detected capacity change from 0 to 262160 [ 714.980040][T29930] x_tables: duplicate underflow at hook 3 [ 715.044323][ T4377] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 715.048028][T29936] FAULT_INJECTION: forcing a failure. [ 715.048028][T29936] name failslab, interval 1, probability 0, space 0, times 0 [ 715.067333][T29936] CPU: 1 PID: 29936 Comm: syz-executor.1 Not tainted 5.16.0-syzkaller #0 [ 715.075847][T29936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 715.085894][T29936] Call Trace: [ 715.089176][T29936] [ 715.092149][T29936] dump_stack_lvl+0xd6/0x122 [ 715.096739][T29936] dump_stack+0x11/0x1b [ 715.100973][T29936] should_fail+0x23c/0x250 [ 715.105396][T29936] ? kcalloc+0x32/0x50 [ 715.109470][T29936] __should_failslab+0x81/0x90 [ 715.114244][T29936] should_failslab+0x5/0x20 [ 715.118839][T29936] __kmalloc+0x6f/0x370 [ 715.123048][T29936] kcalloc+0x32/0x50 [ 715.127020][T29936] ext4_find_extent+0x1d5/0x660 [ 715.131877][T29936] ext4_ext_map_blocks+0xee/0x1940 [ 715.137121][T29936] ? _raw_read_unlock+0x13/0x30 [ 715.142065][T29936] ext4_map_blocks+0x183/0xb90 [ 715.146914][T29936] ext4_iomap_begin+0x147/0x550 [ 715.151846][T29936] ? __iomap_dio_rw+0x143/0x10b0 [ 715.156908][T29936] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 715.162158][T29936] iomap_iter+0x395/0x4a0 [ 715.166505][T29936] __iomap_dio_rw+0x6f2/0x10b0 [ 715.171340][T29936] iomap_dio_rw+0x38/0x80 [ 715.175711][T29936] ext4_file_read_iter+0x190/0x1f0 [ 715.180852][T29936] generic_file_splice_read+0x24f/0x330 [ 715.186447][T29936] ? splice_shrink_spd+0x60/0x60 [ 715.191385][T29936] splice_direct_to_actor+0x2aa/0x650 [ 715.196813][T29936] ? do_splice_direct+0x190/0x190 [ 715.201866][T29936] do_splice_direct+0x106/0x190 [ 715.206805][T29936] do_sendfile+0x675/0xc40 [ 715.211245][T29936] __x64_sys_sendfile64+0x102/0x140 [ 715.216437][T29936] do_syscall_64+0x44/0xd0 [ 715.220922][T29936] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 715.226812][T29936] RIP: 0033:0x7fde3e25afe9 [ 715.231217][T29936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 715.250904][T29936] RSP: 002b:00007fde3d3d1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 715.259411][T29936] RAX: ffffffffffffffda RBX: 00007fde3e36df60 RCX: 00007fde3e25afe9 [ 715.267470][T29936] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000000006 [ 715.275616][T29936] RBP: 00007fde3d3d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 715.283585][T29936] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 21:20:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1600) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:20:51 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2200) 21:20:51 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1400) [ 715.291645][T29936] R13: 00007ffdfc4f7eef R14: 00007fde3d3d1300 R15: 0000000000022000 [ 715.299621][T29936] [ 715.318252][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 715.364856][T29944] loop1: detected capacity change from 0 to 262160 [ 715.384429][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 715.394040][ T1917] Buffer I/O error on dev loop3, logical block 32752, async page read [ 715.417673][T29944] FAULT_INJECTION: forcing a failure. [ 715.417673][T29944] name failslab, interval 1, probability 0, space 0, times 0 [ 715.431090][T29944] CPU: 1 PID: 29944 Comm: syz-executor.1 Not tainted 5.16.0-syzkaller #0 [ 715.439681][T29944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 715.449805][T29944] Call Trace: [ 715.453151][T29944] [ 715.456082][T29944] dump_stack_lvl+0xd6/0x122 [ 715.460771][T29944] dump_stack+0x11/0x1b [ 715.464980][T29944] should_fail+0x23c/0x250 [ 715.469400][T29944] ? __blockdev_direct_IO+0x145/0x2420 [ 715.474903][T29944] __should_failslab+0x81/0x90 [ 715.479719][T29944] should_failslab+0x5/0x20 [ 715.484286][T29944] kmem_cache_alloc+0x4f/0x320 [ 715.489045][T29944] __blockdev_direct_IO+0x145/0x2420 [ 715.494369][T29944] ? schedule+0x8b/0xb0 [ 715.498625][T29944] ? fat_block_truncate_page+0x30/0x30 [ 715.504149][T29944] ? debug_smp_processor_id+0x18/0x20 [ 715.509552][T29944] ? free_unref_page_list+0x1f3/0x230 [ 715.514913][T29944] ? release_pages+0x7b2/0x7e0 [ 715.519675][T29944] fat_direct_IO+0x111/0x1e0 [ 715.524260][T29944] generic_file_read_iter+0x231/0x320 [ 715.529696][T29944] ? iov_iter_pipe+0x100/0x150 [ 715.534454][T29944] generic_file_splice_read+0x24f/0x330 [ 715.540011][T29944] ? splice_shrink_spd+0x60/0x60 [ 715.544945][T29944] splice_direct_to_actor+0x2aa/0x650 [ 715.550359][T29944] ? do_splice_direct+0x190/0x190 [ 715.555396][T29944] do_splice_direct+0x106/0x190 [ 715.560269][T29944] do_sendfile+0x675/0xc40 [ 715.564693][T29944] __x64_sys_sendfile64+0x102/0x140 [ 715.569896][T29944] do_syscall_64+0x44/0xd0 [ 715.574321][T29944] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 715.580241][T29944] RIP: 0033:0x7fde3e25afe9 [ 715.584738][T29944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 715.604690][T29944] RSP: 002b:00007fde3d3d1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 715.613170][T29944] RAX: ffffffffffffffda RBX: 00007fde3e36df60 RCX: 00007fde3e25afe9 [ 715.621305][T29944] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 715.629390][T29944] RBP: 00007fde3d3d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 715.637356][T29944] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 715.645341][T29944] R13: 00007ffdfc4f7eef R14: 00007fde3d3d1300 R15: 0000000000022000 [ 715.653322][T29944] [ 715.734029][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:20:52 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./bus\x00', 0x1}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@ah={{0x30}}, @common=@icmp={{0x28}, {0x0, "401f"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) (async) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) (async, rerun: 32) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) (rerun: 32) sendfile(r1, r2, 0x0, 0x10000) 21:20:52 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1600) 21:20:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:20:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1800) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:52 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2400) 21:20:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 715.814244][T29953] loop1: detected capacity change from 0 to 262160 [ 715.818409][T29955] loop3: detected capacity change from 0 to 262160 [ 715.844263][T29953] FAULT_INJECTION: forcing a failure. [ 715.844263][T29953] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 715.857887][T29953] CPU: 1 PID: 29953 Comm: syz-executor.1 Not tainted 5.16.0-syzkaller #0 [ 715.866319][T29953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 715.876377][T29953] Call Trace: [ 715.879655][T29953] [ 715.882594][T29953] dump_stack_lvl+0xd6/0x122 [ 715.887188][T29953] dump_stack+0x11/0x1b [ 715.891345][T29953] should_fail+0x23c/0x250 [ 715.895770][T29953] __alloc_pages+0x102/0x330 [ 715.900373][T29953] alloc_pages+0x316/0x420 [ 715.904780][T29953] push_pipe+0x267/0x370 [ 715.909018][T29953] iov_iter_get_pages+0x617/0x810 [ 715.914041][T29953] __blockdev_direct_IO+0xaa4/0x2420 [ 715.919328][T29953] ? fat_block_truncate_page+0x30/0x30 [ 715.924786][T29953] ? debug_smp_processor_id+0x18/0x20 [ 715.930676][T29953] ? free_unref_page_list+0x1f3/0x230 [ 715.936055][T29953] ? fat_block_truncate_page+0x30/0x30 [ 715.941562][T29953] fat_direct_IO+0x111/0x1e0 [ 715.946270][T29953] generic_file_read_iter+0x231/0x320 [ 715.951683][T29953] ? iov_iter_pipe+0x100/0x150 [ 715.956451][T29953] generic_file_splice_read+0x24f/0x330 [ 715.962146][T29953] ? splice_shrink_spd+0x60/0x60 [ 715.967081][T29953] splice_direct_to_actor+0x2aa/0x650 [ 715.972609][T29953] ? do_splice_direct+0x190/0x190 [ 715.977630][T29953] do_splice_direct+0x106/0x190 [ 715.982510][T29953] do_sendfile+0x675/0xc40 [ 715.986969][T29953] __x64_sys_sendfile64+0x102/0x140 [ 715.992167][T29953] do_syscall_64+0x44/0xd0 [ 715.996709][T29953] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 716.002599][T29953] RIP: 0033:0x7fde3e25afe9 [ 716.007044][T29953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 716.026808][T29953] RSP: 002b:00007fde3d3d1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 716.035484][T29953] RAX: ffffffffffffffda RBX: 00007fde3e36df60 RCX: 00007fde3e25afe9 [ 716.043444][T29953] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 716.051624][T29953] RBP: 00007fde3d3d11d0 R08: 0000000000000000 R09: 0000000000000000 21:20:52 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2600) [ 716.059596][T29953] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 716.067559][T29953] R13: 00007ffdfc4f7eef R14: 00007fde3d3d1300 R15: 0000000000022000 [ 716.075540][T29953] [ 716.102058][T29960] x_tables: duplicate underflow at hook 3 21:20:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:20:52 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:52 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1800) 21:20:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1a00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 716.175455][T29973] FAULT_INJECTION: forcing a failure. [ 716.175455][T29973] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 716.189198][T29973] CPU: 1 PID: 29973 Comm: syz-executor.1 Not tainted 5.16.0-syzkaller #0 [ 716.197624][T29973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.207684][T29973] Call Trace: [ 716.210952][T29973] [ 716.213868][T29973] dump_stack_lvl+0xd6/0x122 [ 716.218485][T29973] dump_stack+0x11/0x1b [ 716.222805][T29973] should_fail+0x23c/0x250 [ 716.227245][T29973] __alloc_pages+0x102/0x330 [ 716.231827][T29973] alloc_pages+0x316/0x420 [ 716.236341][T29973] push_pipe+0x267/0x370 [ 716.240659][T29973] iov_iter_zero+0x28c/0xba0 [ 716.245312][T29973] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 716.250589][T29973] ? iomap_iter+0x3b1/0x4a0 [ 716.255133][T29973] __iomap_dio_rw+0xb54/0x10b0 [ 716.259907][T29973] iomap_dio_rw+0x38/0x80 [ 716.264225][T29973] ext4_file_read_iter+0x190/0x1f0 [ 716.269400][T29973] generic_file_splice_read+0x24f/0x330 [ 716.274977][T29973] ? splice_shrink_spd+0x60/0x60 [ 716.279977][T29973] splice_direct_to_actor+0x2aa/0x650 [ 716.285331][T29973] ? do_splice_direct+0x190/0x190 [ 716.290410][T29973] do_splice_direct+0x106/0x190 [ 716.295335][T29973] do_sendfile+0x675/0xc40 [ 716.299810][T29973] __x64_sys_sendfile64+0x102/0x140 [ 716.305066][T29973] do_syscall_64+0x44/0xd0 [ 716.309464][T29973] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 716.315345][T29973] RIP: 0033:0x7fde3e25afe9 [ 716.319743][T29973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 716.339332][T29973] RSP: 002b:00007fde3d3d1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 716.347758][T29973] RAX: ffffffffffffffda RBX: 00007fde3e36df60 RCX: 00007fde3e25afe9 [ 716.355812][T29973] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000000006 [ 716.363770][T29973] RBP: 00007fde3d3d11d0 R08: 0000000000000000 R09: 0000000000000000 21:20:52 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2800) 21:20:52 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async, rerun: 64) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./bus\x00', 0x1}, 0x10) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@ah={{0x30}}, @common=@icmp={{0x28}, {0x0, "401f"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) (async, rerun: 32) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) (rerun: 32) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r1, r2, 0x0, 0x10000) 21:20:52 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1a00) [ 716.371867][T29973] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 716.379823][T29973] R13: 00007ffdfc4f7eef R14: 00007fde3d3d1300 R15: 0000000000022000 [ 716.387782][T29973] 21:20:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1c00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:52 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2a00) 21:20:52 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1c00) [ 716.490719][T29985] loop3: detected capacity change from 0 to 262160 [ 716.520901][T29990] x_tables: duplicate underflow at hook 3 21:20:52 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2c00) [ 716.549243][T29990] x_tables: duplicate underflow at hook 3 [ 716.590608][T29990] x_tables: duplicate underflow at hook 3 [ 716.600789][T29990] x_tables: duplicate underflow at hook 3 [ 716.613895][T29990] x_tables: duplicate underflow at hook 3 [ 716.627705][T29990] x_tables: duplicate underflow at hook 3 21:20:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1e00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 716.638848][T29990] x_tables: duplicate underflow at hook 3 [ 716.649681][T29990] x_tables: duplicate underflow at hook 3 [ 716.693773][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:20:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:20:53 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2e00) 21:20:53 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1e00) 21:20:53 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) acct(&(0x7f0000000040)='./file0\x00') ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 21:20:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x2000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:53 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:53 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x3000) [ 716.936758][T30011] loop3: detected capacity change from 0 to 262160 [ 716.956123][T30013] loop1: detected capacity change from 0 to 262160 [ 717.023943][T30013] FAULT_INJECTION: forcing a failure. [ 717.023943][T30013] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 717.037466][T30013] CPU: 0 PID: 30013 Comm: syz-executor.1 Not tainted 5.16.0-syzkaller #0 [ 717.046070][T30013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.056256][T30013] Call Trace: [ 717.059537][T30013] [ 717.062496][T30013] dump_stack_lvl+0xd6/0x122 [ 717.067104][T30013] dump_stack+0x11/0x1b 21:20:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x2200) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:53 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x2000) [ 717.071286][T30013] should_fail+0x23c/0x250 [ 717.075777][T30013] __alloc_pages+0x102/0x330 [ 717.080380][T30013] alloc_pages+0x316/0x420 [ 717.084818][T30013] push_pipe+0x267/0x370 [ 717.089076][T30013] iov_iter_get_pages+0x617/0x810 [ 717.094209][T30013] __blockdev_direct_IO+0xaa4/0x2420 [ 717.099511][T30013] ? fat_block_truncate_page+0x30/0x30 [ 717.104987][T30013] ? debug_smp_processor_id+0x18/0x20 [ 717.110376][T30013] ? free_unref_page_list+0x1f3/0x230 [ 717.115764][T30013] ? fat_block_truncate_page+0x30/0x30 21:20:53 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x3200) [ 717.121257][T30013] fat_direct_IO+0x111/0x1e0 [ 717.125886][T30013] generic_file_read_iter+0x231/0x320 [ 717.131301][T30013] ? generic_file_splice_read+0xbd/0x330 [ 717.136954][T30013] generic_file_splice_read+0x24f/0x330 [ 717.142546][T30013] ? splice_shrink_spd+0x60/0x60 [ 717.147496][T30013] splice_direct_to_actor+0x2aa/0x650 [ 717.152889][T30013] ? do_splice_direct+0x190/0x190 [ 717.157933][T30013] do_splice_direct+0x106/0x190 [ 717.162807][T30013] do_sendfile+0x675/0xc40 [ 717.167419][T30013] __x64_sys_sendfile64+0x102/0x140 21:20:53 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x2200) [ 717.172780][T30013] do_syscall_64+0x44/0xd0 [ 717.177226][T30013] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 717.183212][T30013] RIP: 0033:0x7fde3e25afe9 [ 717.187638][T30013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 717.207264][T30013] RSP: 002b:00007fde3d3d1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 717.215691][T30013] RAX: ffffffffffffffda RBX: 00007fde3e36df60 RCX: 00007fde3e25afe9 21:20:53 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x3400) [ 717.223674][T30013] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 717.231752][T30013] RBP: 00007fde3d3d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 717.239809][T30013] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 717.247795][T30013] R13: 00007ffdfc4f7eef R14: 00007fde3d3d1300 R15: 0000000000022000 [ 717.255908][T30013] [ 717.289582][T30009] Process accounting resumed [ 717.304924][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:20:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 9) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:20:53 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) (rerun: 32) acct(&(0x7f0000000040)='./file0\x00') (async) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) (async, rerun: 64) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) (rerun: 64) sendfile(r0, r1, 0x0, 0x10000) 21:20:53 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x2400) 21:20:53 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x3600) 21:20:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x2400) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 717.476979][T30034] loop3: detected capacity change from 0 to 262160 [ 717.512235][T30042] FAULT_INJECTION: forcing a failure. [ 717.512235][T30042] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 717.526038][T30042] CPU: 0 PID: 30042 Comm: syz-executor.1 Not tainted 5.16.0-syzkaller #0 [ 717.534709][T30042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.544785][T30042] Call Trace: [ 717.548158][T30042] [ 717.551098][T30042] dump_stack_lvl+0xd6/0x122 [ 717.555733][T30042] dump_stack+0x11/0x1b [ 717.559944][T30042] should_fail+0x23c/0x250 [ 717.564893][T30042] __alloc_pages+0x102/0x330 [ 717.569482][T30042] alloc_pages+0x316/0x420 [ 717.573941][T30042] push_pipe+0x267/0x370 [ 717.578180][T30042] iov_iter_zero+0x28c/0xba0 [ 717.582772][T30042] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 717.588040][T30042] ? iomap_iter+0x3b1/0x4a0 [ 717.592556][T30042] ? __iomap_dio_rw+0x33e/0x10b0 [ 717.597605][T30042] __iomap_dio_rw+0xb54/0x10b0 [ 717.602379][T30042] iomap_dio_rw+0x38/0x80 [ 717.606783][T30042] ext4_file_read_iter+0x190/0x1f0 [ 717.611904][T30042] generic_file_splice_read+0x24f/0x330 [ 717.617515][T30042] ? splice_shrink_spd+0x60/0x60 [ 717.622452][T30042] splice_direct_to_actor+0x2aa/0x650 [ 717.627900][T30042] ? do_splice_direct+0x190/0x190 [ 717.633278][T30042] do_splice_direct+0x106/0x190 [ 717.638967][T30042] do_sendfile+0x675/0xc40 [ 717.643402][T30042] __x64_sys_sendfile64+0x102/0x140 [ 717.648596][T30042] do_syscall_64+0x44/0xd0 [ 717.653008][T30042] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 717.658978][T30042] RIP: 0033:0x7fde3e25afe9 [ 717.663689][T30042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 717.684519][T30042] RSP: 002b:00007fde3d3d1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 717.692941][T30042] RAX: ffffffffffffffda RBX: 00007fde3e36df60 RCX: 00007fde3e25afe9 [ 717.701082][T30042] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000000006 [ 717.709141][T30042] RBP: 00007fde3d3d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 717.717124][T30042] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 21:20:54 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:54 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x3800) 21:20:54 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) acct(&(0x7f0000000040)='./file0\x00') (async) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 21:20:54 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x2600) [ 717.725139][T30042] R13: 00007ffdfc4f7eef R14: 00007fde3d3d1300 R15: 0000000000022000 [ 717.733106][T30042] [ 717.739397][T30040] Process accounting resumed 21:20:54 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x3a00) 21:20:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x2600) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:54 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x2800) [ 717.894900][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 718.089525][T30053] Process accounting resumed 21:20:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:20:54 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x3c00) 21:20:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x2800) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:54 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x2a00) 21:20:54 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) pivot_root(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 21:20:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:54 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x3e00) [ 718.204951][T30067] loop3: detected capacity change from 0 to 262160 [ 718.226846][T30075] loop1: detected capacity change from 0 to 262160 21:20:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x2a00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 718.289392][T30075] FAULT_INJECTION: forcing a failure. [ 718.289392][T30075] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 718.303147][T30075] CPU: 1 PID: 30075 Comm: syz-executor.1 Not tainted 5.16.0-syzkaller #0 [ 718.311574][T30075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 718.321640][T30075] Call Trace: [ 718.324925][T30075] [ 718.327890][T30075] dump_stack_lvl+0xd6/0x122 [ 718.332546][T30075] dump_stack+0x11/0x1b [ 718.336796][T30075] should_fail+0x23c/0x250 [ 718.341214][T30075] __alloc_pages+0x102/0x330 [ 718.345798][T30075] alloc_pages+0x316/0x420 [ 718.350222][T30075] push_pipe+0x267/0x370 [ 718.354506][T30075] iov_iter_get_pages+0x617/0x810 [ 718.359566][T30075] __blockdev_direct_IO+0xaa4/0x2420 [ 718.364951][T30075] ? fat_block_truncate_page+0x30/0x30 [ 718.370423][T30075] ? debug_smp_processor_id+0x18/0x20 [ 718.375901][T30075] ? free_unref_page_list+0x1f3/0x230 [ 718.381373][T30075] ? fat_block_truncate_page+0x30/0x30 [ 718.387089][T30075] fat_direct_IO+0x111/0x1e0 [ 718.391805][T30075] generic_file_read_iter+0x231/0x320 [ 718.397694][T30075] ? iov_iter_pipe+0x100/0x150 [ 718.402455][T30075] generic_file_splice_read+0x24f/0x330 [ 718.408011][T30075] ? splice_shrink_spd+0x60/0x60 [ 718.413019][T30075] splice_direct_to_actor+0x2aa/0x650 [ 718.418388][T30075] ? do_splice_direct+0x190/0x190 [ 718.423491][T30075] do_splice_direct+0x106/0x190 [ 718.428390][T30075] do_sendfile+0x675/0xc40 [ 718.432811][T30075] __x64_sys_sendfile64+0x102/0x140 [ 718.438246][T30075] do_syscall_64+0x44/0xd0 [ 718.442651][T30075] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 718.448587][T30075] RIP: 0033:0x7fde3e25afe9 [ 718.453143][T30075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 718.472937][T30075] RSP: 002b:00007fde3d3d1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 718.481481][T30075] RAX: ffffffffffffffda RBX: 00007fde3e36df60 RCX: 00007fde3e25afe9 [ 718.489448][T30075] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 718.497434][T30075] RBP: 00007fde3d3d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 718.505574][T30075] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 718.513613][T30075] R13: 00007ffdfc4f7eef R14: 00007fde3d3d1300 R15: 0000000000022000 [ 718.521608][T30075] 21:20:54 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x2c00) 21:20:54 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000) [ 718.563912][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:20:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x2c00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:55 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc200) [ 718.710123][T30088] loop3: detected capacity change from 0 to 262160 21:20:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 11) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:20:55 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x2e00) 21:20:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x2e00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:55 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc400) [ 718.940037][T30097] loop3: detected capacity change from 0 to 262160 [ 718.990731][T30099] FAULT_INJECTION: forcing a failure. [ 718.990731][T30099] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 719.004297][T30099] CPU: 0 PID: 30099 Comm: syz-executor.1 Not tainted 5.16.0-syzkaller #0 [ 719.012747][T30099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 719.023159][T30099] Call Trace: [ 719.026469][T30099] [ 719.029480][T30099] dump_stack_lvl+0xd6/0x122 [ 719.034104][T30099] dump_stack+0x11/0x1b [ 719.039157][T30099] should_fail+0x23c/0x250 [ 719.043682][T30099] __alloc_pages+0x102/0x330 [ 719.048388][T30099] alloc_pages+0x316/0x420 [ 719.052883][T30099] push_pipe+0x267/0x370 [ 719.057171][T30099] iov_iter_zero+0x28c/0xba0 [ 719.061787][T30099] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 719.067040][T30099] ? iomap_iter+0x3b1/0x4a0 [ 719.071627][T30099] __iomap_dio_rw+0xb54/0x10b0 [ 719.076689][T30099] iomap_dio_rw+0x38/0x80 [ 719.081110][T30099] ext4_file_read_iter+0x190/0x1f0 [ 719.086519][T30099] generic_file_splice_read+0x24f/0x330 [ 719.092149][T30099] ? splice_shrink_spd+0x60/0x60 [ 719.097126][T30099] splice_direct_to_actor+0x2aa/0x650 [ 719.102776][T30099] ? do_splice_direct+0x190/0x190 [ 719.107848][T30099] do_splice_direct+0x106/0x190 [ 719.112726][T30099] do_sendfile+0x675/0xc40 [ 719.117312][T30099] __x64_sys_sendfile64+0x102/0x140 [ 719.122530][T30099] do_syscall_64+0x44/0xd0 [ 719.126972][T30099] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 719.133167][T30099] RIP: 0033:0x7fde3e25afe9 [ 719.137751][T30099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 719.157507][T30099] RSP: 002b:00007fde3d3d1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 719.166287][T30099] RAX: ffffffffffffffda RBX: 00007fde3e36df60 RCX: 00007fde3e25afe9 [ 719.174363][T30099] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000000006 [ 719.182503][T30099] RBP: 00007fde3d3d11d0 R08: 0000000000000000 R09: 0000000000000000 21:20:55 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) (async) pivot_root(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 21:20:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x3000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:55 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc600) 21:20:55 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x3000) 21:20:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 719.191440][T30099] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 719.199409][T30099] R13: 00007ffdfc4f7eef R14: 00007fde3d3d1300 R15: 0000000000022000 [ 719.207455][T30099] 21:20:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x3200) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:55 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x3200) [ 719.396923][T30118] loop3: detected capacity change from 0 to 262160 21:20:55 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc800) [ 719.524881][ T1917] blk_print_req_error: 2 callbacks suppressed [ 719.524896][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:20:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 12) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:20:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x3400) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:56 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x3400) 21:20:56 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xca00) [ 719.726130][T30125] loop3: detected capacity change from 0 to 262160 [ 719.738017][T30129] loop1: detected capacity change from 0 to 262160 [ 719.802912][T30129] FAULT_INJECTION: forcing a failure. [ 719.802912][T30129] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 719.816975][T30129] CPU: 0 PID: 30129 Comm: syz-executor.1 Not tainted 5.16.0-syzkaller #0 [ 719.825419][T30129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 719.835863][T30129] Call Trace: [ 719.839202][T30129] [ 719.842161][T30129] dump_stack_lvl+0xd6/0x122 [ 719.846775][T30129] dump_stack+0x11/0x1b [ 719.850947][T30129] should_fail+0x23c/0x250 [ 719.855384][T30129] __alloc_pages+0x102/0x330 [ 719.861017][T30129] alloc_pages+0x316/0x420 [ 719.865466][T30129] push_pipe+0x267/0x370 [ 719.869766][T30129] iov_iter_get_pages+0x617/0x810 [ 719.874972][T30129] __blockdev_direct_IO+0xaa4/0x2420 [ 719.880355][T30129] ? fat_block_truncate_page+0x30/0x30 [ 719.886268][T30129] ? debug_smp_processor_id+0x18/0x20 [ 719.891733][T30129] ? free_unref_page_list+0x1f3/0x230 [ 719.897218][T30129] ? fat_block_truncate_page+0x30/0x30 [ 719.902732][T30129] fat_direct_IO+0x111/0x1e0 [ 719.907350][T30129] generic_file_read_iter+0x231/0x320 [ 719.912750][T30129] ? iov_iter_pipe+0x100/0x150 [ 719.917735][T30129] generic_file_splice_read+0x24f/0x330 [ 719.923333][T30129] ? splice_shrink_spd+0x60/0x60 [ 719.928284][T30129] splice_direct_to_actor+0x2aa/0x650 [ 719.935049][T30129] ? do_splice_direct+0x190/0x190 [ 719.940113][T30129] do_splice_direct+0x106/0x190 [ 719.945066][T30129] do_sendfile+0x675/0xc40 [ 719.949498][T30129] __x64_sys_sendfile64+0x102/0x140 [ 719.955341][T30129] do_syscall_64+0x44/0xd0 [ 719.959826][T30129] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 719.965730][T30129] RIP: 0033:0x7fde3e25afe9 [ 719.970242][T30129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 719.989979][T30129] RSP: 002b:00007fde3d3d1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 719.998479][T30129] RAX: ffffffffffffffda RBX: 00007fde3e36df60 RCX: 00007fde3e25afe9 [ 720.006503][T30129] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 720.014568][T30129] RBP: 00007fde3d3d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 720.022524][T30129] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 720.031084][T30129] R13: 00007ffdfc4f7eef R14: 00007fde3d3d1300 R15: 0000000000022000 [ 720.039051][T30129] 21:20:56 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) pivot_root(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 21:20:56 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xcc00) 21:20:56 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x3600) 21:20:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x3600) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 720.049808][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 720.110295][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 720.119952][ T1917] Buffer I/O error on dev loop3, logical block 32752, async page read 21:20:56 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xce00) 21:20:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x3800) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:56 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x3800) [ 720.297452][T30152] loop3: detected capacity change from 0 to 262160 21:20:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 13) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:20:56 executing program 5: r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x8, 0x7f, 0x7, 0x0, 0x0, 0xa, 0x901, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240), 0x3}, 0x4, 0x4, 0x40, 0x9, 0x0, 0x9, 0x58, 0x0, 0xf560, 0x0, 0x8}, r1, 0x7, 0xffffffffffffffff, 0xb) open(&(0x7f0000000040)='./bus\x00', 0x20800, 0x21) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='cgroup2\x00', 0x3000000, &(0x7f0000000200)='!\x00') ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unlink(&(0x7f0000000380)='./file0\x00') fcntl$dupfd(r0, 0x0, r4) sendfile(r2, r3, 0x0, 0x10000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 21:20:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x4000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 720.452925][T30157] FAULT_INJECTION: forcing a failure. [ 720.452925][T30157] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 720.466890][T30157] CPU: 0 PID: 30157 Comm: syz-executor.1 Not tainted 5.16.0-syzkaller #0 [ 720.475327][T30157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 720.485392][T30157] Call Trace: [ 720.488690][T30157] [ 720.491633][T30157] dump_stack_lvl+0xd6/0x122 [ 720.496245][T30157] dump_stack+0x11/0x1b [ 720.500447][T30157] should_fail+0x23c/0x250 [ 720.504886][T30157] __alloc_pages+0x102/0x330 [ 720.509627][T30157] alloc_pages+0x316/0x420 [ 720.514129][T30157] push_pipe+0x267/0x370 [ 720.518411][T30157] iov_iter_zero+0x28c/0xba0 [ 720.523024][T30157] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 720.528273][T30157] ? iomap_iter+0x3b1/0x4a0 [ 720.532802][T30157] __iomap_dio_rw+0xb54/0x10b0 [ 720.537598][T30157] iomap_dio_rw+0x38/0x80 [ 720.541956][T30157] ext4_file_read_iter+0x190/0x1f0 [ 720.547143][T30157] generic_file_splice_read+0x24f/0x330 [ 720.552731][T30157] ? splice_shrink_spd+0x60/0x60 [ 720.557693][T30157] splice_direct_to_actor+0x2aa/0x650 [ 720.563142][T30157] ? do_splice_direct+0x190/0x190 [ 720.568183][T30157] do_splice_direct+0x106/0x190 [ 720.573060][T30157] do_sendfile+0x675/0xc40 [ 720.577556][T30157] __x64_sys_sendfile64+0x102/0x140 [ 720.582876][T30157] do_syscall_64+0x44/0xd0 [ 720.587355][T30157] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 720.593266][T30157] RIP: 0033:0x7fde3e25afe9 [ 720.597700][T30157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 720.617399][T30157] RSP: 002b:00007fde3d3d1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 720.625891][T30157] RAX: ffffffffffffffda RBX: 00007fde3e36df60 RCX: 00007fde3e25afe9 [ 720.633931][T30157] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000000006 [ 720.642067][T30157] RBP: 00007fde3d3d11d0 R08: 0000000000000000 R09: 0000000000000000 21:20:56 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x3a00) 21:20:56 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xd000) 21:20:57 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x3c00) [ 720.650084][T30157] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 720.658046][T30157] R13: 00007ffdfc4f7eef R14: 00007fde3d3d1300 R15: 0000000000022000 [ 720.666014][T30157] [ 720.674853][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 720.677831][T30165] cgroup2: Unknown parameter '!' [ 720.693125][ T4377] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:20:57 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xd200) 21:20:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xc800) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:57 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x3e00) 21:20:57 executing program 5: r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x8, 0x7f, 0x7, 0x0, 0x0, 0xa, 0x901, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240), 0x3}, 0x4, 0x4, 0x40, 0x9, 0x0, 0x9, 0x58, 0x0, 0xf560, 0x0, 0x8}, r1, 0x7, 0xffffffffffffffff, 0xb) (async) open(&(0x7f0000000040)='./bus\x00', 0x20800, 0x21) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='cgroup2\x00', 0x3000000, &(0x7f0000000200)='!\x00') (async) ftruncate(r2, 0x800) (async) lseek(r2, 0x200, 0x0) (async, rerun: 32) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) (rerun: 32) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unlink(&(0x7f0000000380)='./file0\x00') (async) fcntl$dupfd(r0, 0x0, r4) (async) sendfile(r2, r3, 0x0, 0x10000) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 720.912130][T30174] loop3: detected capacity change from 0 to 262160 21:20:57 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xd400) [ 720.999030][T30182] cgroup2: Unknown parameter '!' 21:20:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 14) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:20:57 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x4000) 21:20:57 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xd600) 21:20:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xca00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:57 executing program 5: r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x8, 0x7f, 0x7, 0x0, 0x0, 0xa, 0x901, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240), 0x3}, 0x4, 0x4, 0x40, 0x9, 0x0, 0x9, 0x58, 0x0, 0xf560, 0x0, 0x8}, r1, 0x7, 0xffffffffffffffff, 0xb) open(&(0x7f0000000040)='./bus\x00', 0x20800, 0x21) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) (async) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='cgroup2\x00', 0x3000000, &(0x7f0000000200)='!\x00') ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unlink(&(0x7f0000000380)='./file0\x00') fcntl$dupfd(r0, 0x0, r4) sendfile(r2, r3, 0x0, 0x10000) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 721.277722][T30196] loop3: detected capacity change from 0 to 262160 [ 721.297854][T30198] loop1: detected capacity change from 0 to 262160 21:20:57 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 721.436055][T30198] FAULT_INJECTION: forcing a failure. [ 721.436055][T30198] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 721.449630][T30198] CPU: 1 PID: 30198 Comm: syz-executor.1 Not tainted 5.16.0-syzkaller #0 [ 721.458064][T30198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 721.468132][T30198] Call Trace: [ 721.471454][T30198] [ 721.474390][T30198] dump_stack_lvl+0xd6/0x122 [ 721.479347][T30198] dump_stack+0x11/0x1b 21:20:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xcc00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 721.483581][T30198] should_fail+0x23c/0x250 [ 721.488011][T30198] __alloc_pages+0x102/0x330 [ 721.492612][T30198] alloc_pages+0x316/0x420 [ 721.497045][T30198] push_pipe+0x267/0x370 [ 721.501367][T30198] iov_iter_get_pages+0x617/0x810 [ 721.506492][T30198] __blockdev_direct_IO+0xaa4/0x2420 [ 721.511903][T30198] ? fat_block_truncate_page+0x30/0x30 [ 721.517388][T30198] ? debug_smp_processor_id+0x18/0x20 [ 721.522781][T30198] ? free_unref_page_list+0x1f3/0x230 [ 721.528169][T30198] ? fat_block_truncate_page+0x30/0x30 [ 721.533685][T30198] fat_direct_IO+0x111/0x1e0 [ 721.538309][T30198] generic_file_read_iter+0x231/0x320 [ 721.543681][T30198] ? iov_iter_pipe+0x100/0x150 [ 721.548433][T30198] generic_file_splice_read+0x24f/0x330 [ 721.554001][T30198] ? splice_shrink_spd+0x60/0x60 [ 721.559109][T30198] splice_direct_to_actor+0x2aa/0x650 [ 721.564544][T30198] ? do_splice_direct+0x190/0x190 [ 721.569704][T30198] do_splice_direct+0x106/0x190 [ 721.574655][T30198] do_sendfile+0x675/0xc40 [ 721.579061][T30198] __x64_sys_sendfile64+0x102/0x140 [ 721.584253][T30198] do_syscall_64+0x44/0xd0 [ 721.588674][T30198] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 721.594582][T30198] RIP: 0033:0x7fde3e25afe9 [ 721.599052][T30198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 721.618643][T30198] RSP: 002b:00007fde3d3d1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 721.627120][T30198] RAX: ffffffffffffffda RBX: 00007fde3e36df60 RCX: 00007fde3e25afe9 [ 721.635083][T30198] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 721.643122][T30198] RBP: 00007fde3d3d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 721.651102][T30198] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 721.659076][T30198] R13: 00007ffdfc4f7eef R14: 00007fde3d3d1300 R15: 0000000000022000 [ 721.667347][T30198] 21:20:58 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xd800) 21:20:58 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xc400) [ 721.714380][ T4377] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:20:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:58 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 21:20:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 15) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:20:58 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xda00) 21:20:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 722.123404][T30228] FAULT_INJECTION: forcing a failure. [ 722.123404][T30228] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 722.136911][T30228] CPU: 1 PID: 30228 Comm: syz-executor.1 Not tainted 5.16.0-syzkaller #0 [ 722.145390][T30228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.155511][T30228] Call Trace: [ 722.158795][T30228] [ 722.161736][T30228] dump_stack_lvl+0xd6/0x122 [ 722.166345][T30228] dump_stack+0x11/0x1b [ 722.170483][T30228] should_fail+0x23c/0x250 [ 722.174986][T30228] __alloc_pages+0x102/0x330 [ 722.179559][T30228] alloc_pages+0x316/0x420 [ 722.183964][T30228] push_pipe+0x267/0x370 [ 722.188380][T30228] iov_iter_zero+0x28c/0xba0 [ 722.192951][T30228] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 722.198378][T30228] ? iomap_iter+0x3b1/0x4a0 [ 722.202888][T30228] __iomap_dio_rw+0xb54/0x10b0 [ 722.207650][T30228] iomap_dio_rw+0x38/0x80 [ 722.211987][T30228] ext4_file_read_iter+0x190/0x1f0 [ 722.217184][T30228] generic_file_splice_read+0x24f/0x330 [ 722.222767][T30228] ? splice_shrink_spd+0x60/0x60 [ 722.227719][T30228] splice_direct_to_actor+0x2aa/0x650 [ 722.233123][T30228] ? do_splice_direct+0x190/0x190 [ 722.238145][T30228] do_splice_direct+0x106/0x190 [ 722.243181][T30228] do_sendfile+0x675/0xc40 [ 722.247618][T30228] __x64_sys_sendfile64+0x102/0x140 [ 722.252842][T30228] do_syscall_64+0x44/0xd0 [ 722.257262][T30228] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 722.263147][T30228] RIP: 0033:0x7fde3e25afe9 [ 722.267567][T30228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 722.287338][T30228] RSP: 002b:00007fde3d3d1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 722.295835][T30228] RAX: ffffffffffffffda RBX: 00007fde3e36df60 RCX: 00007fde3e25afe9 [ 722.303856][T30228] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000000006 [ 722.311911][T30228] RBP: 00007fde3d3d11d0 R08: 0000000000000000 R09: 0000000000000000 21:20:58 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 722.319897][T30228] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 722.327887][T30228] R13: 00007ffdfc4f7eef R14: 00007fde3d3d1300 R15: 0000000000022000 [ 722.335973][T30228] [ 722.342708][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:20:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xce00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:58 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xc600) [ 722.443157][T30232] loop3: detected capacity change from 0 to 262160 21:20:58 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xdc00) 21:20:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:59 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0xfffffff9) sendfile(r0, r1, 0x0, 0x10000) 21:20:59 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xde00) 21:20:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xd000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:20:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 722.804079][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:20:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:20:59 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xe000) [ 723.011033][T30258] loop1: detected capacity change from 0 to 262160 21:20:59 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xc800) 21:20:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:59 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xe200) 21:20:59 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xe400) 21:20:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:20:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xd200) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 723.427813][T30272] loop3: detected capacity change from 0 to 262160 21:20:59 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0xfffffff9) sendfile(r0, r1, 0x0, 0x10000) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) creat(&(0x7f0000000100)='./bus\x00', 0x0) (async) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) (async) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0xfffffff9) (async) sendfile(r0, r1, 0x0, 0x10000) (async) 21:20:59 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xe600) 21:21:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:00 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0xfffffff9) (async) sendfile(r0, r1, 0x0, 0x10000) 21:21:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xb800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:00 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xca00) 21:21:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xd400) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:00 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x1, 'caif0\x00', {}, 0x1ff}) sendfile(r0, r1, 0x0, 0x10000) [ 723.761332][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 723.787454][ T1902] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:00 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xe800) 21:21:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:00 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xea00) 21:21:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xba00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:00 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xcc00) 21:21:00 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xec00) [ 724.301550][T30316] loop1: detected capacity change from 0 to 262160 21:21:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xd600) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 724.484828][T30323] loop3: detected capacity change from 0 to 262160 21:21:00 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xee00) 21:21:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xbc00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 724.673983][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:01 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xf000) 21:21:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:01 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x1, 'caif0\x00', {}, 0x1ff}) (async) sendfile(r0, r1, 0x0, 0x10000) 21:21:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xd800) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:01 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xce00) [ 724.944361][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 724.953656][T30341] loop3: detected capacity change from 0 to 262160 [ 724.955310][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 724.970630][ T1917] Buffer I/O error on dev loop3, logical block 32752, async page read 21:21:01 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xf200) 21:21:01 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) (rerun: 32) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x1, 'caif0\x00', {}, 0x1ff}) (async, rerun: 64) sendfile(r0, r1, 0x0, 0x10000) (rerun: 64) 21:21:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xbe00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 725.207754][T30354] loop1: detected capacity change from 0 to 262160 21:21:01 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000480)={0x0, 0x0, "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", "f1c189c47746dfd85f867bc5a9d93c9c2b57cf6567cdf3bfc68e8e77bdf3fc46556ea8708bdecdaaf9fa70321331c8bb4f7211729fb4293aa983659ccb9042b9c3ba77860dc33d81bf1b94ce7cd8249ad62b24195e3da940af1c587bbcaea1c08561fc7854ceccb15fd75f908a9f9d5008a5c595e0698b1deb6f6d5ef28183f662cb238a28640d83046791a520c34718f0a14374eebe7ac28e586d078509bae22decc7b6a4c834d45093e979b74eb9c73c41bbc780984019c531b6f9e5cc9fad8bc4a6c269a869c07b557dd15ab88fb949df5ec1a6b19847574c6fccb2bcebf8a783a119f436ddcfc74944c4b4386a07ecda74a6ae18ea997e04a43248ccd1cb9ec63a8473d60fcd1e7792227cf61eea7d0531f23420d9355cdfeb133e73007755786a2fb88c8aede791d2efedb2b41176b1550c822f2772dcc0423853a654f5178f73cb4e4b9831d72dafac9d38b1597c1c1520969243d902076a7efe5b6d7907d88edfe26c5ac344e2bb4ec9eceb7aab26ddb6906474b302d7f1eeab505cff22954ddb5ed11ab14132e544e0be12eae0ef424860feb34811003594840f8229d3b1f6e4a37b9710e2627f7609fe8bcb7b0579256a1e5c3d0c2faa803baabeedf445ebb90c5366f25700f8df9d48a83b5b56e25031b5958a442dd55b21751c18b98ea93434d696d4b79f8ab4a6e64d40a24d70c874a19a964ce283325875b04757e6acb47e854f39e637203b00e05ca31d1f07b3b6ceb5715d2bb4d29ad7ec85ab03d100aeb3fed99c40d75c96429e1cab85ddcf570d7ce92fe956c13a2dc571df761c3bdd4906d57a467660cfef1344e5be4ceff31f610b42cc84df611057a31b05e18d67766aa35f7ecd14583bf898d0d73ef6add52c2051d25a7941c53341e8539768945d0f6ead73090420730bac713308ec8f880bc435a7cfb0d42377d5a45776500b9e807364a5ceb16ca9aa5954f7ca54224cbc472d3bdd3c24aabf112c777dcdf336cfbc146cc03520d8fac692badbcc2398715162c45feb61213f0b067fe10bb53e3999f1d6d3f51f698d0cb9fc0397f3af98252d24a70fbe61c87b2c6a031591a875ea29355b3a80123ced8913ae2c4dbe9f156a9c310508a08de867c4e1715b208f30c6dafd0e8a2a9136650ac577b246fb55250b0c8918823a45a04d9ed20634dc443374ad0afaa434b24c541ccb54c7e285d91f78bf2ca1bab10b1f42bfc603ec7f82d4ee01d580fad4a84cf816ad40abc6834b910c8759b34e103b06f68237c313b224c2472cf6d7a9f23e601a97bcd0eb2ef0ab5cab7469233ce5ff573828b9e3f1e5546ce8857cf4f2ba780ce24f77827bcf23cd0dda22b131e3d7acc17c0f0029e989a62810256a38092d0e3268ead194065b6b857dd81c5cdf95399d3e4ab28447083faa730b1ffa49c7410969874a99266a5705a19261beafe0a6128abf7b87ac9bb00e492c4480a68f6d33eee5821ad3b697e43fff313274ccba80b3b1f615627bce4eb0dbe93e4a141327f1aad45e9c351e84a7424ac40e3ef94e491bb2f4b0c0b37066c2dd9310161373a0cb2926b6a7067faaec8c98f8099a50a300c8bcf95b78a08844d7d113d2f98e7b7449ab36a688d8c205a5d7794ca6c9ab1a47075aa8284e26755fd3ed0a5d04fe21f3fc08e5fc74f167b71f0e793d639e914a31a5507b4cbeb84ee189d4f2769933fbaf76c4b57c402897fad447df824cf3d70048e37c090672f3886fd98482ed9d61d28362cb6c5b510dbecf72c26c41d697459d0a7bde912a495065cc25c2a9027f5a53f8dc632149af777099d3df89dcecef68d8d700affae759880403f2ced1ecb664e9c05bcd5b59bbfe7483a403aafaeeda08d770de0592ec0d41ef53f10513bb754eddf08dbbe1682056ca52618a9caa3191548812b4fc46c7a632a8e66e48d79bc07e1439e1ef489725a7bbe98af45e82f12819bc97759f47245659f0b86b64edfe63182d70ac9cb2842e191dac3b23a84531b369f86baf9df1ffedc5013f5314e4c1ab896c15ac72c01092e0435467aa13e0a1a9a3b30b3bd9ce0545236a69aa657c1c0670c36e24499bf56319b6d09d7799367715d0e3f2eaf4202d13762392556bd5bc54832e8f665bbb46014f8594cb8ec14304434b1ee90a7e3c2d0588f1fab5f048b5662f4fbc054e7b8cf464aec0e162df163c69ef7c7b23570c58bb1335e6b223612cca3035c57f01cefbd53f0b12d080389363e90ca6eb8ed43f0149458e5448fb62728147de2d9da4895bc4b4f851fbadb62b30615f33d9ab24c3158996f61a7372ac276db8bd6861f5f5724ccec8417d6296d7055995a16ba5c81519d56718eecaea6b01a5090ae6cecde0bc4c14f417aff7b0c6ac1fc3f20ad759c7c9d8f5b4bc7aee963f480877f5ef14c855276e66ff26c28533b05d0a6a0a0fb1938a8d353cab14d62a71060ee064c422050560de41d7411dd7166aacc4ed7726505b3b1ced4a3098b4a03a751bd1ccbba3924b1c277038ed6a5add39fd586a913f8029fb2452c55b4da80f865faad86c4674a99696ef0442339e81763c6b28643d228a771110b1ceffc8162f0da19f903eec2416e99ca3b5b8b31c63a17f380b786e228df663d5ab78e8c2261adc0cc424207e924bc73ea70987301cfedc53a1181a9aaa2526c40341e910c59b8d9bed8a45f101cdfbb02b5f878f55185adf33a79c249a39600b5baa5c409c5a80d1ec89b46dabdad82b5b55970e1ea1431bbeacdad0d67fcf4d7a180daa609c3c68ae4fdc8cf1fa8420213f26b6514e91b093dc8f095dae974c6a401c3b5268ecfb37ca4f2203d483d06b2f1a2a7173cd63283b33760d7af45b6f36f5c2a5d06c33a8d9ba54a7cc8a3b2f8679a17ac930b68d662cfe60c89931497f4b9e31a1a76b4a33e824dc065f2c936193cc7af0091055884de46c04bb399f3897b73847dae2c29ab4375b5b04faa6ef2ddc8c52a0f60b65fb40a7447902ff71feb46ce8364ac7ccbc7366d9144ddf2ab415c7af0bd7c2b56cd5e5c19b8443f584142580ad9c3503f830d71414a33f2798f66881afc3819fada61dccfe3076aa61568a2b5866f20327d4b7fd226cb14639317f9da3c66041d1afd01d5c1f0989f23c977966f8130fa7888601b031adaef2b9cf23b2c5ffa56a50ff9d22f1d8dea788ac47c0dd7e5b1e0d6bf4869ca500e188e11b7e06d19fe33eeced3f8576743a01f93f548aaf3d2f4a25042bba088ffae7cd7d2a33fc81cf6e1021bb217b778ef0976addf80bb5d493fe878b1e65f9dd55083cb059ffd5c01d60881b35560567a1acdfb52c155ae92b264345d810b5a2447b25be00331ed6d024a58c9daf4629a2f75d1e5b999db01767187d666c5a4e38b2c453c78a47f5b797b89f709a883a3b747287771e365e036cd5c5ddb7e277fb5190a911d9578e6f41e7c6e3a2083dc70309213f016ec4c490b970b3e92ac7c4f70a6363de6026b5cb1ad3cde59a095f4b5ca968ea81c064fb975b032991ba0e3b74cd07102daa52adadc5b47297beb8555dbfa05045966c1dfa4e4d515f6dfda00627f4851b7fb846ccffe14601407ee261ec6a8f860c8e18c4189bda0d8258a33c5b12368a0d05caf551a6d3163a5b840ae5d983d90ec1699441dc60a12ee03e281a70d59bbf324195d3f55f813530bef438e7234ff8c4f2e45986657130d8157a42de6749d0f6a61a9fb50f06784814e85867daee727d9dafe1bb2328e8a36b2714acc2c59c11e00049c6e6b7f87fd95a309dfa736bd2bef7e432d12e54b42c7e82dd006b1bcb08270e65154f99b0422b736bab8d8feacb46e26cd2cfe4c91aa3002da5fdae6b080abb6f24e8de33ad2d552b309ad38c8fe067b2f799afd00f56336b1d5757a525961b9ff9aea6df8fe810020a085e8167c15105db0b8d273a0520413ffdecb3381c2ac4f8b3b5f828f86c19f7acf037b66939b1287f33c01b86274dab6136dcab74e42224cd4a1ad209356e21de1394077a27ff54c5cf0a7e37cfe57eed290d5f8c861aba082ada27ff0699ccf3a92b27c83278f6400a164b3cfb0a86068de5b1316acffb9f7229176904f21b9793f6fbd1d5a8450aed46c53f1c55e8a95c829e59d05c33b1197f0d491f1f6197599b986b1faebfc40d01bb8ab32f73bb91cc5bd92d3b3839cf0093e1aa9837ea97410e4e001f1ab79315d5012ba789815eb38f57e391b2fb72db2738ff99ca56141584867028ca722091f700f5df7326516b442e51023b31d5244396cd52a27b5bc37beb73d38170a9f77039f9ea5a9978a0692da5f30d18d390305b4522af03c17d6da8d014efbf78ad028c5c4b791e62bc5289371e4b31df7e1cc5ee12ce6bc5317407780db4dedc858ea010469ccb31c042cc2f9a96127d25673ed7202a14594707addad7792805cae04ef38bb44cabeff727aa787a36bfec7738a78a909395a5a9cacd44dd7ef81566727b3b7c299d5eec4c77a8be7f657250ab189f2ff66ac617e03531fe619258a827b9f4bb21ca9a306c617e30f5f4cbf5f471d67e6b7f83b0b46092ac6811e57ad5bf12e108e03d5cae04102593ffa8fd2e680595fcfffc63711306ba9b9fdd023be5c25f6767f516ce4c56e0c2f2faeb289ef053def81062296123308fe601a2c573cebebe4664eb895089221a20ec22e3a5a578e98343e64b9977c3f1e2ed343188ea1f5d6fca872918f4fccdf225db57b88ce54daaf19cb93c2fb8fb02eed450310c6a2511ebc790a671bb5abe6c6d9fa31b4efb4d988293d10aa52339b82a877f171d17c892633272d28a2f202ec34d68eb38a583615930d8d2f8adf6da729f8553ecc670411a8eedf1112798cb1f9be19c1990bda4d9144bcb6e8d8ae4a92090978d5803ca539dfaf039283cba57afc086e7644cf16363e557bf3b0b4007f1fef8dd0c5031b51a845b321f91294e7fc8dbaa75ffdb0e3257491b13d9c5e7198450aff27f9e5533cd46b8d31bac26225b4659b8020061357d0c1aedc3ae849e5711ace4ab53e99064995c00907ae34d5eabb855ff55b2eca86b41b530f6ed4e8a2f27d79d139bc9dd4c7336cc0a2634ca53403473f450f851e3671c5fea25d0372bb237b9ef1feebc77618d204585a2a2d388c5e98cd63b6327e265522ea5668afdb4c79cb6c52887df2379b46a136fa92f1bdf94353b3346619203dc22bb1f98e1099a61d5eb904e2404d72c139f61b153beb2f7e448939ca1d0edac276b2fe27e684a50007108aee2deecb2f1228040bbabe69f0a772d7574193ff31d094b3b75d2935443180ddb5f8e7e278378af7b8e8c72b2fafc825f61d92b34f89cc9ba450447d3eb2886da15c980852a7000b9b3471ab9967e8b64cba84a2bc3d3e01717672453336dc3b3ae010fb8b9a2f675d67d2c675b074a"}) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './bus\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000000280)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4, 0x3}]}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0x19, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x472, 0x45}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x30}}, 0x841) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r5, 0x0, 0x10000) 21:21:01 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xf400) [ 725.380200][T30357] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 21:21:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xda00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xc000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:01 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xf600) [ 725.554746][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 725.653805][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 725.658483][T30369] loop1: detected capacity change from 0 to 262160 [ 725.665500][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 725.680333][ T1917] Buffer I/O error on dev loop1, logical block 32752, async page read 21:21:02 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xd000) 21:21:02 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xf800) 21:21:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xc200) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:02 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10002) 21:21:02 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10003) 21:21:02 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10004) [ 726.174223][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:02 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000480)={0x0, 0x0, "30df94546d0263bbc90e1c1903329ff64d2f3dd8eba17bba1710a5e650771a8f1bc6bd62d28da715c8f0b025244676d682cb9066e98c7724d5d54e3b8dfbce02dfefbee1bbc154a02e8dd89620d427080179821099d78d5db479940937df1797c2f370332d08aafd44d3cdb23d3bc729a363db9baecb1ea96f4bec2083b27fdd4f1a6488ff44c9d5722fe43b6f483e45da349154aaa6ed265aac63b97d1a3aee93c077dd50f9d13fd7d6374e4db81b96ce9790d152814178315bde618f0d3c3f785bf667c186cccfbb7fdd0067e4f77083032a1b332f65642855f05f4201c4ef4a3f13bcce006be6d1c6d7ad0769b61d969b6defefa7bd7b27d0157211f4572f", "f1c189c47746dfd85f867bc5a9d93c9c2b57cf6567cdf3bfc68e8e77bdf3fc46556ea8708bdecdaaf9fa70321331c8bb4f7211729fb4293aa983659ccb9042b9c3ba77860dc33d81bf1b94ce7cd8249ad62b24195e3da940af1c587bbcaea1c08561fc7854ceccb15fd75f908a9f9d5008a5c595e0698b1deb6f6d5ef28183f662cb238a28640d83046791a520c34718f0a14374eebe7ac28e586d078509bae22decc7b6a4c834d45093e979b74eb9c73c41bbc780984019c531b6f9e5cc9fad8bc4a6c269a869c07b557dd15ab88fb949df5ec1a6b19847574c6fccb2bcebf8a783a119f436ddcfc74944c4b4386a07ecda74a6ae18ea997e04a43248ccd1cb9ec63a8473d60fcd1e7792227cf61eea7d0531f23420d9355cdfeb133e73007755786a2fb88c8aede791d2efedb2b41176b1550c822f2772dcc0423853a654f5178f73cb4e4b9831d72dafac9d38b1597c1c1520969243d902076a7efe5b6d7907d88edfe26c5ac344e2bb4ec9eceb7aab26ddb6906474b302d7f1eeab505cff22954ddb5ed11ab14132e544e0be12eae0ef424860feb34811003594840f8229d3b1f6e4a37b9710e2627f7609fe8bcb7b0579256a1e5c3d0c2faa803baabeedf445ebb90c5366f25700f8df9d48a83b5b56e25031b5958a442dd55b21751c18b98ea93434d696d4b79f8ab4a6e64d40a24d70c874a19a964ce283325875b04757e6acb47e854f39e637203b00e05ca31d1f07b3b6ceb5715d2bb4d29ad7ec85ab03d100aeb3fed99c40d75c96429e1cab85ddcf570d7ce92fe956c13a2dc571df761c3bdd4906d57a467660cfef1344e5be4ceff31f610b42cc84df611057a31b05e18d67766aa35f7ecd14583bf898d0d73ef6add52c2051d25a7941c53341e8539768945d0f6ead73090420730bac713308ec8f880bc435a7cfb0d42377d5a45776500b9e807364a5ceb16ca9aa5954f7ca54224cbc472d3bdd3c24aabf112c777dcdf336cfbc146cc03520d8fac692badbcc2398715162c45feb61213f0b067fe10bb53e3999f1d6d3f51f698d0cb9fc0397f3af98252d24a70fbe61c87b2c6a031591a875ea29355b3a80123ced8913ae2c4dbe9f156a9c310508a08de867c4e1715b208f30c6dafd0e8a2a9136650ac577b246fb55250b0c8918823a45a04d9ed20634dc443374ad0afaa434b24c541ccb54c7e285d91f78bf2ca1bab10b1f42bfc603ec7f82d4ee01d580fad4a84cf816ad40abc6834b910c8759b34e103b06f68237c313b224c2472cf6d7a9f23e601a97bcd0eb2ef0ab5cab7469233ce5ff573828b9e3f1e5546ce8857cf4f2ba780ce24f77827bcf23cd0dda22b131e3d7acc17c0f0029e989a62810256a38092d0e3268ead194065b6b857dd81c5cdf95399d3e4ab28447083faa730b1ffa49c7410969874a99266a5705a19261beafe0a6128abf7b87ac9bb00e492c4480a68f6d33eee5821ad3b697e43fff313274ccba80b3b1f615627bce4eb0dbe93e4a141327f1aad45e9c351e84a7424ac40e3ef94e491bb2f4b0c0b37066c2dd9310161373a0cb2926b6a7067faaec8c98f8099a50a300c8bcf95b78a08844d7d113d2f98e7b7449ab36a688d8c205a5d7794ca6c9ab1a47075aa8284e26755fd3ed0a5d04fe21f3fc08e5fc74f167b71f0e793d639e914a31a5507b4cbeb84ee189d4f2769933fbaf76c4b57c402897fad447df824cf3d70048e37c090672f3886fd98482ed9d61d28362cb6c5b510dbecf72c26c41d697459d0a7bde912a495065cc25c2a9027f5a53f8dc632149af777099d3df89dcecef68d8d700affae759880403f2ced1ecb664e9c05bcd5b59bbfe7483a403aafaeeda08d770de0592ec0d41ef53f10513bb754eddf08dbbe1682056ca52618a9caa3191548812b4fc46c7a632a8e66e48d79bc07e1439e1ef489725a7bbe98af45e82f12819bc97759f47245659f0b86b64edfe63182d70ac9cb2842e191dac3b23a84531b369f86baf9df1ffedc5013f5314e4c1ab896c15ac72c01092e0435467aa13e0a1a9a3b30b3bd9ce0545236a69aa657c1c0670c36e24499bf56319b6d09d7799367715d0e3f2eaf4202d13762392556bd5bc54832e8f665bbb46014f8594cb8ec14304434b1ee90a7e3c2d0588f1fab5f048b5662f4fbc054e7b8cf464aec0e162df163c69ef7c7b23570c58bb1335e6b223612cca3035c57f01cefbd53f0b12d080389363e90ca6eb8ed43f0149458e5448fb62728147de2d9da4895bc4b4f851fbadb62b30615f33d9ab24c3158996f61a7372ac276db8bd6861f5f5724ccec8417d6296d7055995a16ba5c81519d56718eecaea6b01a5090ae6cecde0bc4c14f417aff7b0c6ac1fc3f20ad759c7c9d8f5b4bc7aee963f480877f5ef14c855276e66ff26c28533b05d0a6a0a0fb1938a8d353cab14d62a71060ee064c422050560de41d7411dd7166aacc4ed7726505b3b1ced4a3098b4a03a751bd1ccbba3924b1c277038ed6a5add39fd586a913f8029fb2452c55b4da80f865faad86c4674a99696ef0442339e81763c6b28643d228a771110b1ceffc8162f0da19f903eec2416e99ca3b5b8b31c63a17f380b786e228df663d5ab78e8c2261adc0cc424207e924bc73ea70987301cfedc53a1181a9aaa2526c40341e910c59b8d9bed8a45f101cdfbb02b5f878f55185adf33a79c249a39600b5baa5c409c5a80d1ec89b46dabdad82b5b55970e1ea1431bbeacdad0d67fcf4d7a180daa609c3c68ae4fdc8cf1fa8420213f26b6514e91b093dc8f095dae974c6a401c3b5268ecfb37ca4f2203d483d06b2f1a2a7173cd63283b33760d7af45b6f36f5c2a5d06c33a8d9ba54a7cc8a3b2f8679a17ac930b68d662cfe60c89931497f4b9e31a1a76b4a33e824dc065f2c936193cc7af0091055884de46c04bb399f3897b73847dae2c29ab4375b5b04faa6ef2ddc8c52a0f60b65fb40a7447902ff71feb46ce8364ac7ccbc7366d9144ddf2ab415c7af0bd7c2b56cd5e5c19b8443f584142580ad9c3503f830d71414a33f2798f66881afc3819fada61dccfe3076aa61568a2b5866f20327d4b7fd226cb14639317f9da3c66041d1afd01d5c1f0989f23c977966f8130fa7888601b031adaef2b9cf23b2c5ffa56a50ff9d22f1d8dea788ac47c0dd7e5b1e0d6bf4869ca500e188e11b7e06d19fe33eeced3f8576743a01f93f548aaf3d2f4a25042bba088ffae7cd7d2a33fc81cf6e1021bb217b778ef0976addf80bb5d493fe878b1e65f9dd55083cb059ffd5c01d60881b35560567a1acdfb52c155ae92b264345d810b5a2447b25be00331ed6d024a58c9daf4629a2f75d1e5b999db01767187d666c5a4e38b2c453c78a47f5b797b89f709a883a3b747287771e365e036cd5c5ddb7e277fb5190a911d9578e6f41e7c6e3a2083dc70309213f016ec4c490b970b3e92ac7c4f70a6363de6026b5cb1ad3cde59a095f4b5ca968ea81c064fb975b032991ba0e3b74cd07102daa52adadc5b47297beb8555dbfa05045966c1dfa4e4d515f6dfda00627f4851b7fb846ccffe14601407ee261ec6a8f860c8e18c4189bda0d8258a33c5b12368a0d05caf551a6d3163a5b840ae5d983d90ec1699441dc60a12ee03e281a70d59bbf324195d3f55f813530bef438e7234ff8c4f2e45986657130d8157a42de6749d0f6a61a9fb50f06784814e85867daee727d9dafe1bb2328e8a36b2714acc2c59c11e00049c6e6b7f87fd95a309dfa736bd2bef7e432d12e54b42c7e82dd006b1bcb08270e65154f99b0422b736bab8d8feacb46e26cd2cfe4c91aa3002da5fdae6b080abb6f24e8de33ad2d552b309ad38c8fe067b2f799afd00f56336b1d5757a525961b9ff9aea6df8fe810020a085e8167c15105db0b8d273a0520413ffdecb3381c2ac4f8b3b5f828f86c19f7acf037b66939b1287f33c01b86274dab6136dcab74e42224cd4a1ad209356e21de1394077a27ff54c5cf0a7e37cfe57eed290d5f8c861aba082ada27ff0699ccf3a92b27c83278f6400a164b3cfb0a86068de5b1316acffb9f7229176904f21b9793f6fbd1d5a8450aed46c53f1c55e8a95c829e59d05c33b1197f0d491f1f6197599b986b1faebfc40d01bb8ab32f73bb91cc5bd92d3b3839cf0093e1aa9837ea97410e4e001f1ab79315d5012ba789815eb38f57e391b2fb72db2738ff99ca56141584867028ca722091f700f5df7326516b442e51023b31d5244396cd52a27b5bc37beb73d38170a9f77039f9ea5a9978a0692da5f30d18d390305b4522af03c17d6da8d014efbf78ad028c5c4b791e62bc5289371e4b31df7e1cc5ee12ce6bc5317407780db4dedc858ea010469ccb31c042cc2f9a96127d25673ed7202a14594707addad7792805cae04ef38bb44cabeff727aa787a36bfec7738a78a909395a5a9cacd44dd7ef81566727b3b7c299d5eec4c77a8be7f657250ab189f2ff66ac617e03531fe619258a827b9f4bb21ca9a306c617e30f5f4cbf5f471d67e6b7f83b0b46092ac6811e57ad5bf12e108e03d5cae04102593ffa8fd2e680595fcfffc63711306ba9b9fdd023be5c25f6767f516ce4c56e0c2f2faeb289ef053def81062296123308fe601a2c573cebebe4664eb895089221a20ec22e3a5a578e98343e64b9977c3f1e2ed343188ea1f5d6fca872918f4fccdf225db57b88ce54daaf19cb93c2fb8fb02eed450310c6a2511ebc790a671bb5abe6c6d9fa31b4efb4d988293d10aa52339b82a877f171d17c892633272d28a2f202ec34d68eb38a583615930d8d2f8adf6da729f8553ecc670411a8eedf1112798cb1f9be19c1990bda4d9144bcb6e8d8ae4a92090978d5803ca539dfaf039283cba57afc086e7644cf16363e557bf3b0b4007f1fef8dd0c5031b51a845b321f91294e7fc8dbaa75ffdb0e3257491b13d9c5e7198450aff27f9e5533cd46b8d31bac26225b4659b8020061357d0c1aedc3ae849e5711ace4ab53e99064995c00907ae34d5eabb855ff55b2eca86b41b530f6ed4e8a2f27d79d139bc9dd4c7336cc0a2634ca53403473f450f851e3671c5fea25d0372bb237b9ef1feebc77618d204585a2a2d388c5e98cd63b6327e265522ea5668afdb4c79cb6c52887df2379b46a136fa92f1bdf94353b3346619203dc22bb1f98e1099a61d5eb904e2404d72c139f61b153beb2f7e448939ca1d0edac276b2fe27e684a50007108aee2deecb2f1228040bbabe69f0a772d7574193ff31d094b3b75d2935443180ddb5f8e7e278378af7b8e8c72b2fafc825f61d92b34f89cc9ba450447d3eb2886da15c980852a7000b9b3471ab9967e8b64cba84a2bc3d3e01717672453336dc3b3ae010fb8b9a2f675d67d2c675b074a"}) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './bus\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000000280)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4, 0x3}]}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0x19, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x472, 0x45}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x30}}, 0x841) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r5, 0x0, 0x10000) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) creat(&(0x7f0000000100)='./bus\x00', 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000480)={0x0, 0x0, "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", "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"}) (async) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './bus\x00'}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000000280)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4, 0x3}]}]}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0x19, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x472, 0x45}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x30}}, 0x841) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) (async) sendfile(r0, r5, 0x0, 0x10000) (async) 21:21:02 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10005) 21:21:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xdc00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 726.279624][T30387] loop3: detected capacity change from 0 to 262160 21:21:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:02 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10006) 21:21:02 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xd200) [ 726.340062][T30389] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 21:21:02 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10007) 21:21:02 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000480)={0x0, 0x0, "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", "f1c189c47746dfd85f867bc5a9d93c9c2b57cf6567cdf3bfc68e8e77bdf3fc46556ea8708bdecdaaf9fa70321331c8bb4f7211729fb4293aa983659ccb9042b9c3ba77860dc33d81bf1b94ce7cd8249ad62b24195e3da940af1c587bbcaea1c08561fc7854ceccb15fd75f908a9f9d5008a5c595e0698b1deb6f6d5ef28183f662cb238a28640d83046791a520c34718f0a14374eebe7ac28e586d078509bae22decc7b6a4c834d45093e979b74eb9c73c41bbc780984019c531b6f9e5cc9fad8bc4a6c269a869c07b557dd15ab88fb949df5ec1a6b19847574c6fccb2bcebf8a783a119f436ddcfc74944c4b4386a07ecda74a6ae18ea997e04a43248ccd1cb9ec63a8473d60fcd1e7792227cf61eea7d0531f23420d9355cdfeb133e73007755786a2fb88c8aede791d2efedb2b41176b1550c822f2772dcc0423853a654f5178f73cb4e4b9831d72dafac9d38b1597c1c1520969243d902076a7efe5b6d7907d88edfe26c5ac344e2bb4ec9eceb7aab26ddb6906474b302d7f1eeab505cff22954ddb5ed11ab14132e544e0be12eae0ef424860feb34811003594840f8229d3b1f6e4a37b9710e2627f7609fe8bcb7b0579256a1e5c3d0c2faa803baabeedf445ebb90c5366f25700f8df9d48a83b5b56e25031b5958a442dd55b21751c18b98ea93434d696d4b79f8ab4a6e64d40a24d70c874a19a964ce283325875b04757e6acb47e854f39e637203b00e05ca31d1f07b3b6ceb5715d2bb4d29ad7ec85ab03d100aeb3fed99c40d75c96429e1cab85ddcf570d7ce92fe956c13a2dc571df761c3bdd4906d57a467660cfef1344e5be4ceff31f610b42cc84df611057a31b05e18d67766aa35f7ecd14583bf898d0d73ef6add52c2051d25a7941c53341e8539768945d0f6ead73090420730bac713308ec8f880bc435a7cfb0d42377d5a45776500b9e807364a5ceb16ca9aa5954f7ca54224cbc472d3bdd3c24aabf112c777dcdf336cfbc146cc03520d8fac692badbcc2398715162c45feb61213f0b067fe10bb53e3999f1d6d3f51f698d0cb9fc0397f3af98252d24a70fbe61c87b2c6a031591a875ea29355b3a80123ced8913ae2c4dbe9f156a9c310508a08de867c4e1715b208f30c6dafd0e8a2a9136650ac577b246fb55250b0c8918823a45a04d9ed20634dc443374ad0afaa434b24c541ccb54c7e285d91f78bf2ca1bab10b1f42bfc603ec7f82d4ee01d580fad4a84cf816ad40abc6834b910c8759b34e103b06f68237c313b224c2472cf6d7a9f23e601a97bcd0eb2ef0ab5cab7469233ce5ff573828b9e3f1e5546ce8857cf4f2ba780ce24f77827bcf23cd0dda22b131e3d7acc17c0f0029e989a62810256a38092d0e3268ead194065b6b857dd81c5cdf95399d3e4ab28447083faa730b1ffa49c7410969874a99266a5705a19261beafe0a6128abf7b87ac9bb00e492c4480a68f6d33eee5821ad3b697e43fff313274ccba80b3b1f615627bce4eb0dbe93e4a141327f1aad45e9c351e84a7424ac40e3ef94e491bb2f4b0c0b37066c2dd9310161373a0cb2926b6a7067faaec8c98f8099a50a300c8bcf95b78a08844d7d113d2f98e7b7449ab36a688d8c205a5d7794ca6c9ab1a47075aa8284e26755fd3ed0a5d04fe21f3fc08e5fc74f167b71f0e793d639e914a31a5507b4cbeb84ee189d4f2769933fbaf76c4b57c402897fad447df824cf3d70048e37c090672f3886fd98482ed9d61d28362cb6c5b510dbecf72c26c41d697459d0a7bde912a495065cc25c2a9027f5a53f8dc632149af777099d3df89dcecef68d8d700affae759880403f2ced1ecb664e9c05bcd5b59bbfe7483a403aafaeeda08d770de0592ec0d41ef53f10513bb754eddf08dbbe1682056ca52618a9caa3191548812b4fc46c7a632a8e66e48d79bc07e1439e1ef489725a7bbe98af45e82f12819bc97759f47245659f0b86b64edfe63182d70ac9cb2842e191dac3b23a84531b369f86baf9df1ffedc5013f5314e4c1ab896c15ac72c01092e0435467aa13e0a1a9a3b30b3bd9ce0545236a69aa657c1c0670c36e24499bf56319b6d09d7799367715d0e3f2eaf4202d13762392556bd5bc54832e8f665bbb46014f8594cb8ec14304434b1ee90a7e3c2d0588f1fab5f048b5662f4fbc054e7b8cf464aec0e162df163c69ef7c7b23570c58bb1335e6b223612cca3035c57f01cefbd53f0b12d080389363e90ca6eb8ed43f0149458e5448fb62728147de2d9da4895bc4b4f851fbadb62b30615f33d9ab24c3158996f61a7372ac276db8bd6861f5f5724ccec8417d6296d7055995a16ba5c81519d56718eecaea6b01a5090ae6cecde0bc4c14f417aff7b0c6ac1fc3f20ad759c7c9d8f5b4bc7aee963f480877f5ef14c855276e66ff26c28533b05d0a6a0a0fb1938a8d353cab14d62a71060ee064c422050560de41d7411dd7166aacc4ed7726505b3b1ced4a3098b4a03a751bd1ccbba3924b1c277038ed6a5add39fd586a913f8029fb2452c55b4da80f865faad86c4674a99696ef0442339e81763c6b28643d228a771110b1ceffc8162f0da19f903eec2416e99ca3b5b8b31c63a17f380b786e228df663d5ab78e8c2261adc0cc424207e924bc73ea70987301cfedc53a1181a9aaa2526c40341e910c59b8d9bed8a45f101cdfbb02b5f878f55185adf33a79c249a39600b5baa5c409c5a80d1ec89b46dabdad82b5b55970e1ea1431bbeacdad0d67fcf4d7a180daa609c3c68ae4fdc8cf1fa8420213f26b6514e91b093dc8f095dae974c6a401c3b5268ecfb37ca4f2203d483d06b2f1a2a7173cd63283b33760d7af45b6f36f5c2a5d06c33a8d9ba54a7cc8a3b2f8679a17ac930b68d662cfe60c89931497f4b9e31a1a76b4a33e824dc065f2c936193cc7af0091055884de46c04bb399f3897b73847dae2c29ab4375b5b04faa6ef2ddc8c52a0f60b65fb40a7447902ff71feb46ce8364ac7ccbc7366d9144ddf2ab415c7af0bd7c2b56cd5e5c19b8443f584142580ad9c3503f830d71414a33f2798f66881afc3819fada61dccfe3076aa61568a2b5866f20327d4b7fd226cb14639317f9da3c66041d1afd01d5c1f0989f23c977966f8130fa7888601b031adaef2b9cf23b2c5ffa56a50ff9d22f1d8dea788ac47c0dd7e5b1e0d6bf4869ca500e188e11b7e06d19fe33eeced3f8576743a01f93f548aaf3d2f4a25042bba088ffae7cd7d2a33fc81cf6e1021bb217b778ef0976addf80bb5d493fe878b1e65f9dd55083cb059ffd5c01d60881b35560567a1acdfb52c155ae92b264345d810b5a2447b25be00331ed6d024a58c9daf4629a2f75d1e5b999db01767187d666c5a4e38b2c453c78a47f5b797b89f709a883a3b747287771e365e036cd5c5ddb7e277fb5190a911d9578e6f41e7c6e3a2083dc70309213f016ec4c490b970b3e92ac7c4f70a6363de6026b5cb1ad3cde59a095f4b5ca968ea81c064fb975b032991ba0e3b74cd07102daa52adadc5b47297beb8555dbfa05045966c1dfa4e4d515f6dfda00627f4851b7fb846ccffe14601407ee261ec6a8f860c8e18c4189bda0d8258a33c5b12368a0d05caf551a6d3163a5b840ae5d983d90ec1699441dc60a12ee03e281a70d59bbf324195d3f55f813530bef438e7234ff8c4f2e45986657130d8157a42de6749d0f6a61a9fb50f06784814e85867daee727d9dafe1bb2328e8a36b2714acc2c59c11e00049c6e6b7f87fd95a309dfa736bd2bef7e432d12e54b42c7e82dd006b1bcb08270e65154f99b0422b736bab8d8feacb46e26cd2cfe4c91aa3002da5fdae6b080abb6f24e8de33ad2d552b309ad38c8fe067b2f799afd00f56336b1d5757a525961b9ff9aea6df8fe810020a085e8167c15105db0b8d273a0520413ffdecb3381c2ac4f8b3b5f828f86c19f7acf037b66939b1287f33c01b86274dab6136dcab74e42224cd4a1ad209356e21de1394077a27ff54c5cf0a7e37cfe57eed290d5f8c861aba082ada27ff0699ccf3a92b27c83278f6400a164b3cfb0a86068de5b1316acffb9f7229176904f21b9793f6fbd1d5a8450aed46c53f1c55e8a95c829e59d05c33b1197f0d491f1f6197599b986b1faebfc40d01bb8ab32f73bb91cc5bd92d3b3839cf0093e1aa9837ea97410e4e001f1ab79315d5012ba789815eb38f57e391b2fb72db2738ff99ca56141584867028ca722091f700f5df7326516b442e51023b31d5244396cd52a27b5bc37beb73d38170a9f77039f9ea5a9978a0692da5f30d18d390305b4522af03c17d6da8d014efbf78ad028c5c4b791e62bc5289371e4b31df7e1cc5ee12ce6bc5317407780db4dedc858ea010469ccb31c042cc2f9a96127d25673ed7202a14594707addad7792805cae04ef38bb44cabeff727aa787a36bfec7738a78a909395a5a9cacd44dd7ef81566727b3b7c299d5eec4c77a8be7f657250ab189f2ff66ac617e03531fe619258a827b9f4bb21ca9a306c617e30f5f4cbf5f471d67e6b7f83b0b46092ac6811e57ad5bf12e108e03d5cae04102593ffa8fd2e680595fcfffc63711306ba9b9fdd023be5c25f6767f516ce4c56e0c2f2faeb289ef053def81062296123308fe601a2c573cebebe4664eb895089221a20ec22e3a5a578e98343e64b9977c3f1e2ed343188ea1f5d6fca872918f4fccdf225db57b88ce54daaf19cb93c2fb8fb02eed450310c6a2511ebc790a671bb5abe6c6d9fa31b4efb4d988293d10aa52339b82a877f171d17c892633272d28a2f202ec34d68eb38a583615930d8d2f8adf6da729f8553ecc670411a8eedf1112798cb1f9be19c1990bda4d9144bcb6e8d8ae4a92090978d5803ca539dfaf039283cba57afc086e7644cf16363e557bf3b0b4007f1fef8dd0c5031b51a845b321f91294e7fc8dbaa75ffdb0e3257491b13d9c5e7198450aff27f9e5533cd46b8d31bac26225b4659b8020061357d0c1aedc3ae849e5711ace4ab53e99064995c00907ae34d5eabb855ff55b2eca86b41b530f6ed4e8a2f27d79d139bc9dd4c7336cc0a2634ca53403473f450f851e3671c5fea25d0372bb237b9ef1feebc77618d204585a2a2d388c5e98cd63b6327e265522ea5668afdb4c79cb6c52887df2379b46a136fa92f1bdf94353b3346619203dc22bb1f98e1099a61d5eb904e2404d72c139f61b153beb2f7e448939ca1d0edac276b2fe27e684a50007108aee2deecb2f1228040bbabe69f0a772d7574193ff31d094b3b75d2935443180ddb5f8e7e278378af7b8e8c72b2fafc825f61d92b34f89cc9ba450447d3eb2886da15c980852a7000b9b3471ab9967e8b64cba84a2bc3d3e01717672453336dc3b3ae010fb8b9a2f675d67d2c675b074a"}) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './bus\x00'}) (async) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000000280)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4, 0x3}]}]}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0x19, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x472, 0x45}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x30}}, 0x841) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r5, 0x0, 0x10000) [ 726.478113][T30421] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 21:21:03 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10008) 21:21:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xc400) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xde00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:03 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000001f, 0x1, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x21) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 726.728785][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 726.740587][T30430] loop3: detected capacity change from 0 to 262160 [ 726.751189][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 726.760920][ T1917] Buffer I/O error on dev loop3, logical block 32752, async page read 21:21:03 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10009) [ 726.783839][T30432] loop1: detected capacity change from 0 to 262160 21:21:03 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000a) 21:21:03 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000b) 21:21:03 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000c) 21:21:03 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xd400) 21:21:03 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000d) 21:21:03 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000001f, 0x1, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) (async) creat(&(0x7f0000000040)='./file0\x00', 0x21) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 21:21:03 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000e) 21:21:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xc600) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xe000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:03 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000f) 21:21:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 727.226962][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:03 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10010) 21:21:03 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10011) 21:21:03 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10022) 21:21:03 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10041) 21:21:03 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xd600) 21:21:03 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10043) 21:21:03 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000001f, 0x1, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) (async) creat(&(0x7f0000000040)='./file0\x00', 0x21) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 21:21:03 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10045) 21:21:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xc800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 727.709634][T30488] loop1: detected capacity change from 0 to 262160 21:21:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xe200) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:04 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10047) 21:21:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:04 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10049) 21:21:04 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1004a) 21:21:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 727.799007][T30494] loop3: detected capacity change from 0 to 262160 21:21:04 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1004b) 21:21:04 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus\x00') socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 21:21:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xca00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:04 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xd800) 21:21:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xe400) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:04 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1004c) [ 728.043443][T30510] loop1: detected capacity change from 0 to 262160 [ 728.061410][T30515] loop3: detected capacity change from 0 to 262160 21:21:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:04 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1004e) 21:21:04 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10050) 21:21:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:04 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) pivot_root(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus\x00') (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 21:21:04 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10052) 21:21:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xcc00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:04 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xda00) 21:21:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:04 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10053) 21:21:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xe600) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:04 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10054) [ 728.471639][T30548] loop3: detected capacity change from 0 to 262160 21:21:04 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10056) 21:21:04 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10058) 21:21:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:05 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus\x00') socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) pivot_root(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus\x00') (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) creat(&(0x7f0000000100)='./bus\x00', 0x0) (async) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) (async) sendfile(r0, r1, 0x0, 0x10000) (async) 21:21:05 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10059) 21:21:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xce00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 728.800412][T30577] loop1: detected capacity change from 0 to 262160 21:21:05 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xdc00) 21:21:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:05 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1005b) 21:21:05 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff, 0x7}}, './bus\x00'}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x400, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r2, 0x0, 0x10000) 21:21:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xe800) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xd000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:05 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1005d) 21:21:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 728.964895][T30585] loop3: detected capacity change from 0 to 262160 21:21:05 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1005e) 21:21:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:05 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1005f) 21:21:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:05 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xde00) 21:21:05 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10060) 21:21:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:05 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff, 0x7}}, './bus\x00'}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x400, 0x0) (async) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r2, 0x0, 0x10000) 21:21:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xea00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xd200) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:05 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10062) 21:21:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:05 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10064) 21:21:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 729.546781][T30614] loop1: detected capacity change from 0 to 262160 [ 729.547329][T30616] loop3: detected capacity change from 0 to 262160 21:21:06 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10065) 21:21:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:06 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xe000) 21:21:06 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10066) 21:21:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:06 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff, 0x7}}, './bus\x00'}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x400, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r2, 0x0, 0x10000) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) creat(&(0x7f0000000100)='./bus\x00', 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff, 0x7}}, './bus\x00'}) (async) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x400, 0x0) (async) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) (async) sendfile(r0, r2, 0x0, 0x10000) (async) 21:21:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xec00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xd400) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:06 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10067) [ 729.950346][ T1917] blk_print_req_error: 7 callbacks suppressed [ 729.950360][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 729.972334][T30642] loop3: detected capacity change from 0 to 262160 [ 729.979425][ T4377] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 729.991440][T30646] loop1: detected capacity change from 0 to 262160 21:21:06 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) acct(0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x8) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7fff) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$P9_RREMOVE(r2, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r1, r3, 0x0, 0x10000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x10000, 0x2, 0x3, 0x2, 0x79, 0x8}, 0x20) ioctl$FICLONE(r3, 0x40049409, r0) 21:21:06 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10068) [ 729.998862][ T4377] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 730.008606][ T4377] Buffer I/O error on dev loop1, logical block 32752, async page read 21:21:06 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10069) 21:21:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:06 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1006a) 21:21:06 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xe200) 21:21:06 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1006b) 21:21:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:06 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) acct(0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x8) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7fff) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$P9_RREMOVE(r2, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r1, r3, 0x0, 0x10000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x10000, 0x2, 0x3, 0x2, 0x79, 0x8}, 0x20) ioctl$FICLONE(r3, 0x40049409, r0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) acct(0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) creat(&(0x7f0000000100)='./bus\x00', 0x8) (async) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7fff) (async) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) write$P9_RREMOVE(r2, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) (async) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) (async) sendfile(r1, r3, 0x0, 0x10000) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x10000, 0x2, 0x3, 0x2, 0x79, 0x8}, 0x20) (async) ioctl$FICLONE(r3, 0x40049409, r0) (async) 21:21:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xee00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xd600) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 730.484795][ T4377] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 730.495937][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:06 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1006c) [ 730.551236][T30681] loop1: detected capacity change from 0 to 262160 [ 730.551566][T30680] loop3: detected capacity change from 0 to 262160 21:21:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:07 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1006e) 21:21:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:07 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10070) [ 730.903789][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:07 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xe400) 21:21:07 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) acct(0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x8) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7fff) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$P9_RREMOVE(r2, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r1, r3, 0x0, 0x10000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x10000, 0x2, 0x3, 0x2, 0x79, 0x8}, 0x20) ioctl$FICLONE(r3, 0x40049409, r0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) acct(0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) creat(&(0x7f0000000100)='./bus\x00', 0x8) (async) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7fff) (async) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) write$P9_RREMOVE(r2, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) (async) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) (async) sendfile(r1, r3, 0x0, 0x10000) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x10000, 0x2, 0x3, 0x2, 0x79, 0x8}, 0x20) (async) ioctl$FICLONE(r3, 0x40049409, r0) (async) 21:21:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:07 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10071) 21:21:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xf000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xd800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:07 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10074) 21:21:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:07 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10077) 21:21:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 731.083344][T30731] loop1: detected capacity change from 0 to 262160 [ 731.116117][ T4377] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:07 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1007a) [ 731.373861][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:07 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xe600) 21:21:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:07 executing program 5: r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7fff) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='\x00', 0x0, r0) recvmmsg$unix(r1, &(0x7f0000002980)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000002600)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000200)=""/188, 0xbc}, {&(0x7f00000002c0)=""/202, 0xca}, {&(0x7f0000001480)=""/207, 0xcf}, {0xfffffffffffffffe}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/97, 0x61}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000002580)=""/97, 0x61}], 0x9}}, {{&(0x7f00000026c0)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000002740)=""/202, 0xca}, {&(0x7f0000002840)=""/100, 0x64}], 0x2, &(0x7f00000028c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}], 0x2, 0x10000, 0x0) lseek(r1, 0x200, 0x0) r4 = open(&(0x7f0000002a00)='./bus\x00', 0x43fe4f9f9ebe6768, 0x0) r5 = syz_mount_image$iso9660(&(0x7f0000002bc0), &(0x7f0000002c00)='./bus\x00', 0x100000001, 0x1, &(0x7f0000002d40)=[{&(0x7f0000002c40)="0189670291ae624269608871dceb805f1130b28d2f6025e43b2445998025cf4faa3f596b30c5327912d37175c85744a2290da47a5ed40861c2d5243f70b5bd5c6190bbf2189bbf6f16bdd0dc066727ea94cbd46eaba57c3d70e54f333ca49c53ba2fa9b250a220904f9614942f40546a74050f7ebea2bcc07567b53f429f8bcfc19ff81abf858682b183e390861b1a59c6535984baf74823747091d370cb94665b5165af0a151e04be003f81875f9c9d356db9065ac71b394a536897b5bd68b07e643911c3c4c3c49a301160e24712003b837cc4c2f85e", 0xd7, 0x4}], 0x2000000, &(0x7f0000002d80)={[{@mode={'mode', 0x3d, 0x1000}}, {@block}, {@nocompress}, {}, {@utf8}], [{@smackfsdef}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}) close(r5) r6 = accept(r3, &(0x7f0000002a40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000002ac0)=0x80) recvfrom$unix(r6, &(0x7f0000002b00)=""/39, 0x27, 0x2, &(0x7f0000002b40)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000002e00)={0x1, 0x80, 0x0, 0x7f, 0x4c, 0x0, 0x0, 0x0, 0xb, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe2eb, 0x2, @perf_config_ext={0xa161, 0x200}, 0x8000, 0x8, 0x80, 0x0, 0x1, 0x3ff, 0x2, 0x0, 0xfffffffe, 0x0, 0xffffffffffffff00}, 0x0, 0x5, 0xffffffffffffffff, 0x11) sendfile(r1, r4, 0x0, 0x10000) 21:21:07 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1007c) 21:21:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xf200) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xda00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:07 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10082) 21:21:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:07 executing program 5: r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7fff) (async) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='\x00', 0x0, r0) (async) recvmmsg$unix(r1, &(0x7f0000002980)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000002600)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000200)=""/188, 0xbc}, {&(0x7f00000002c0)=""/202, 0xca}, {&(0x7f0000001480)=""/207, 0xcf}, {0xfffffffffffffffe}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/97, 0x61}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000002580)=""/97, 0x61}], 0x9}}, {{&(0x7f00000026c0)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000002740)=""/202, 0xca}, {&(0x7f0000002840)=""/100, 0x64}], 0x2, &(0x7f00000028c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}], 0x2, 0x10000, 0x0) lseek(r1, 0x200, 0x0) (async) r4 = open(&(0x7f0000002a00)='./bus\x00', 0x43fe4f9f9ebe6768, 0x0) r5 = syz_mount_image$iso9660(&(0x7f0000002bc0), &(0x7f0000002c00)='./bus\x00', 0x100000001, 0x1, &(0x7f0000002d40)=[{&(0x7f0000002c40)="0189670291ae624269608871dceb805f1130b28d2f6025e43b2445998025cf4faa3f596b30c5327912d37175c85744a2290da47a5ed40861c2d5243f70b5bd5c6190bbf2189bbf6f16bdd0dc066727ea94cbd46eaba57c3d70e54f333ca49c53ba2fa9b250a220904f9614942f40546a74050f7ebea2bcc07567b53f429f8bcfc19ff81abf858682b183e390861b1a59c6535984baf74823747091d370cb94665b5165af0a151e04be003f81875f9c9d356db9065ac71b394a536897b5bd68b07e643911c3c4c3c49a301160e24712003b837cc4c2f85e", 0xd7, 0x4}], 0x2000000, &(0x7f0000002d80)={[{@mode={'mode', 0x3d, 0x1000}}, {@block}, {@nocompress}, {}, {@utf8}], [{@smackfsdef}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}) close(r5) (async) r6 = accept(r3, &(0x7f0000002a40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000002ac0)=0x80) recvfrom$unix(r6, &(0x7f0000002b00)=""/39, 0x27, 0x2, &(0x7f0000002b40)=@file={0x1, './file0\x00'}, 0x6e) (async) perf_event_open(&(0x7f0000002e00)={0x1, 0x80, 0x0, 0x7f, 0x4c, 0x0, 0x0, 0x0, 0xb, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe2eb, 0x2, @perf_config_ext={0xa161, 0x200}, 0x8000, 0x8, 0x80, 0x0, 0x1, 0x3ff, 0x2, 0x0, 0xfffffffe, 0x0, 0xffffffffffffff00}, 0x0, 0x5, 0xffffffffffffffff, 0x11) (async) sendfile(r1, r4, 0x0, 0x10000) 21:21:07 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100b1) 21:21:08 executing program 5: r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7fff) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='\x00', 0x0, r0) (async) recvmmsg$unix(r1, &(0x7f0000002980)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000002600)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000200)=""/188, 0xbc}, {&(0x7f00000002c0)=""/202, 0xca}, {&(0x7f0000001480)=""/207, 0xcf}, {0xfffffffffffffffe}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/97, 0x61}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000002580)=""/97, 0x61}], 0x9}}, {{&(0x7f00000026c0)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000002740)=""/202, 0xca}, {&(0x7f0000002840)=""/100, 0x64}], 0x2, &(0x7f00000028c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}], 0x2, 0x10000, 0x0) (async) lseek(r1, 0x200, 0x0) (async, rerun: 32) r4 = open(&(0x7f0000002a00)='./bus\x00', 0x43fe4f9f9ebe6768, 0x0) (async, rerun: 32) r5 = syz_mount_image$iso9660(&(0x7f0000002bc0), &(0x7f0000002c00)='./bus\x00', 0x100000001, 0x1, &(0x7f0000002d40)=[{&(0x7f0000002c40)="0189670291ae624269608871dceb805f1130b28d2f6025e43b2445998025cf4faa3f596b30c5327912d37175c85744a2290da47a5ed40861c2d5243f70b5bd5c6190bbf2189bbf6f16bdd0dc066727ea94cbd46eaba57c3d70e54f333ca49c53ba2fa9b250a220904f9614942f40546a74050f7ebea2bcc07567b53f429f8bcfc19ff81abf858682b183e390861b1a59c6535984baf74823747091d370cb94665b5165af0a151e04be003f81875f9c9d356db9065ac71b394a536897b5bd68b07e643911c3c4c3c49a301160e24712003b837cc4c2f85e", 0xd7, 0x4}], 0x2000000, &(0x7f0000002d80)={[{@mode={'mode', 0x3d, 0x1000}}, {@block}, {@nocompress}, {}, {@utf8}], [{@smackfsdef}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}) close(r5) r6 = accept(r3, &(0x7f0000002a40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000002ac0)=0x80) recvfrom$unix(r6, &(0x7f0000002b00)=""/39, 0x27, 0x2, &(0x7f0000002b40)=@file={0x1, './file0\x00'}, 0x6e) (async) perf_event_open(&(0x7f0000002e00)={0x1, 0x80, 0x0, 0x7f, 0x4c, 0x0, 0x0, 0x0, 0xb, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe2eb, 0x2, @perf_config_ext={0xa161, 0x200}, 0x8000, 0x8, 0x80, 0x0, 0x1, 0x3ff, 0x2, 0x0, 0xfffffffe, 0x0, 0xffffffffffffff00}, 0x0, 0x5, 0xffffffffffffffff, 0x11) sendfile(r1, r4, 0x0, 0x10000) [ 731.576351][T30774] loop1: detected capacity change from 0 to 262160 [ 731.610467][T30785] loop3: detected capacity change from 0 to 262160 21:21:08 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100f1) 21:21:08 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xe800) 21:21:08 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10180) 21:21:08 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x7fff) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@dellink={0xd0, 0x11, 0x800, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104, 0x2000}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_NET_NS_PID={0x8, 0x13, r0}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_PHYS_PORT_ID={0xf, 0x22, "340d631aa9e2a4f251c155"}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xab}, @IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x58, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_IKEY={0x8, 0x4, 0x40}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xf9821}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x5}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) 21:21:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xdc00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xf400) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 731.984146][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:08 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10204) [ 732.050187][T30805] loop1: detected capacity change from 0 to 262160 [ 732.078032][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:08 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10281) [ 732.098337][T30810] loop3: detected capacity change from 0 to 262160 [ 732.110555][ T1917] Buffer I/O error on dev loop3, logical block 32752, async page read 21:21:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:08 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10300) 21:21:08 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10402) 21:21:08 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10406) 21:21:08 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10408) 21:21:09 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xea00) 21:21:09 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10500) 21:21:09 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) r0 = getpgrp(0xffffffffffffffff) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x7fff) (async) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@dellink={0xd0, 0x11, 0x800, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104, 0x2000}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_NET_NS_PID={0x8, 0x13, r0}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_PHYS_PORT_ID={0xf, 0x22, "340d631aa9e2a4f251c155"}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xab}, @IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x58, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_IKEY={0x8, 0x4, 0x40}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xf9821}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x5}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) (async, rerun: 64) lseek(r2, 0x200, 0x0) (async, rerun: 64) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) 21:21:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xde00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xf600) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:09 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10600) [ 732.761855][T30836] loop3: detected capacity change from 0 to 262160 [ 732.764209][T30835] loop1: detected capacity change from 0 to 262160 21:21:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:09 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10604) 21:21:09 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10700) 21:21:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xe000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:09 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10804) 21:21:09 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10900) 21:21:09 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xec00) 21:21:09 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10a00) 21:21:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xf800) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:09 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x7fff) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@dellink={0xd0, 0x11, 0x800, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104, 0x2000}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_NET_NS_PID={0x8, 0x13, r0}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_PHYS_PORT_ID={0xf, 0x22, "340d631aa9e2a4f251c155"}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xab}, @IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x58, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_IKEY={0x8, 0x4, 0x40}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xf9821}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x5}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) getpgrp(0xffffffffffffffff) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x7fff) (async) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@dellink={0xd0, 0x11, 0x800, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104, 0x2000}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_NET_NS_PID={0x8, 0x13, r0}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_PHYS_PORT_ID={0xf, 0x22, "340d631aa9e2a4f251c155"}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xab}, @IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x58, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_IKEY={0x8, 0x4, 0x40}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xf9821}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x5}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) creat(&(0x7f0000000100)='./bus\x00', 0x0) (async) ftruncate(r2, 0x800) (async) lseek(r2, 0x200, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) (async) sendfile(r2, r3, 0x0, 0x10000) (async) [ 733.441732][T30864] loop3: detected capacity change from 0 to 262160 21:21:10 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10b00) 21:21:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xe200) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 733.726195][T30888] loop1: detected capacity change from 0 to 262160 21:21:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:10 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a803}, [@IFLA_LINKINFO={0x18, 0x37, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2a803}, [@IFLA_LINKINFO={0x18, 0x37, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x81, 0xfffffffc, 0x10, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800, 0x40, 0xffffffff, 0xffffffff}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x2a803}, [@IFLA_LINKINFO={0x18, 0x37, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x244, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x2815}, 0x20000000) 21:21:10 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10c00) 21:21:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10002) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10003) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 733.951852][T30898] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 733.975013][T30898] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 733.998905][T30901] loop3: detected capacity change from 0 to 262160 21:21:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10004) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:10 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xee00) 21:21:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10005) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:10 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10d00) 21:21:10 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10e00) 21:21:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xe400) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 734.187942][T30905] loop3: detected capacity change from 0 to 262160 21:21:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10006) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:11 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a803}, [@IFLA_LINKINFO={0x18, 0x37, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2a803}, [@IFLA_LINKINFO={0x18, 0x37, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x38}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x81, 0xfffffffc, 0x10, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800, 0x40, 0xffffffff, 0xffffffff}}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x2a803}, [@IFLA_LINKINFO={0x18, 0x37, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x244, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x2815}, 0x20000000) 21:21:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10007) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:11 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10f00) 21:21:11 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x11100) [ 734.646229][T30920] loop3: detected capacity change from 0 to 262160 21:21:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10008) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:11 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xf000) 21:21:11 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x12200) 21:21:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xe600) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:11 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a803}, [@IFLA_LINKINFO={0x18, 0x37, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x38}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2a803}, [@IFLA_LINKINFO={0x18, 0x37, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x81, 0xfffffffc, 0x10, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800, 0x40, 0xffffffff, 0xffffffff}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x2a803}, [@IFLA_LINKINFO={0x18, 0x37, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x244, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x2815}, 0x20000000) 21:21:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10009) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 734.804967][T30941] loop1: detected capacity change from 0 to 262160 [ 734.821239][T30943] loop3: detected capacity change from 0 to 262160 21:21:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1000a) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 734.904022][T30947] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 734.951525][T30945] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 734.974116][ T1917] blk_print_req_error: 10 callbacks suppressed [ 734.974130][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 735.214831][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1000b) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:11 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x138ae) 21:21:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xe800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:11 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xf200) [ 735.371696][T30957] loop1: detected capacity change from 0 to 262160 [ 735.371718][T30956] loop3: detected capacity change from 0 to 262160 21:21:11 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x139ae) 21:21:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1000c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1000d) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:11 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 21:21:11 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x13f00) [ 735.534644][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 735.575470][T30971] loop3: detected capacity change from 0 to 262160 21:21:12 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x14000) 21:21:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1000e) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1000f) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 735.744025][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 735.782743][T30981] loop3: detected capacity change from 0 to 262160 21:21:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10010) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 736.014081][ T4377] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:12 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) (async) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 21:21:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10011) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:12 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x14100) 21:21:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xea00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:12 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xf400) [ 736.093658][T30987] loop3: detected capacity change from 0 to 262160 [ 736.102904][T30993] loop1: detected capacity change from 0 to 262160 21:21:12 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x14300) 21:21:12 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) (async, rerun: 32) lseek(r0, 0x200, 0x0) (async, rerun: 32) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 21:21:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10022) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10044) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:12 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x14500) 21:21:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xe800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 736.253885][ T4377] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 736.289756][T31007] loop3: detected capacity change from 0 to 262160 [ 736.408516][T31017] loop5: detected capacity change from 0 to 262160 [ 736.425313][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 736.574265][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10049) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:13 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x14700) 21:21:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xec00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xea00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:13 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xf600) [ 736.733834][ T1917] I/O error, dev loop5, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 736.764556][T31023] loop3: detected capacity change from 0 to 262160 [ 736.764975][T31025] loop1: detected capacity change from 0 to 262160 [ 736.772169][T31026] loop5: detected capacity change from 0 to 262160 21:21:13 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x14900) 21:21:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1004d) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10056) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:13 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x14a00) [ 736.923886][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 736.968199][T31039] loop3: detected capacity change from 0 to 262160 21:21:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1005a) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1005b) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 737.141724][T31045] loop3: detected capacity change from 0 to 262160 21:21:13 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x14b00) 21:21:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1005d) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xee00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:13 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xf800) [ 737.461792][T31048] loop1: detected capacity change from 0 to 262160 [ 737.470396][T31054] loop3: detected capacity change from 0 to 262160 21:21:13 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x14c00) 21:21:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1005e) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10060) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 737.586533][ T1917] Buffer I/O error on dev loop3, logical block 32752, async page read 21:21:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10061) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 737.637332][T31066] loop3: detected capacity change from 0 to 262160 21:21:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10064) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 737.737558][T31070] loop3: detected capacity change from 0 to 262160 21:21:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10068) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1006d) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1006f) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 737.909497][T31076] loop3: detected capacity change from 0 to 262160 21:21:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xf000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xee00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, r1) 21:21:14 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x14e00) 21:21:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10074) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 738.208431][T31081] loop5: detected capacity change from 0 to 262160 21:21:14 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10002) 21:21:14 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10003) [ 738.265837][T31084] loop3: detected capacity change from 0 to 262160 21:21:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10075) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:14 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10004) 21:21:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10077) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:14 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10005) 21:21:14 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10006) [ 738.449605][T31099] loop3: detected capacity change from 0 to 262160 21:21:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xf200) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1007e) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 738.654963][T31106] loop3: detected capacity change from 0 to 262160 [ 738.656866][T31107] loop1: detected capacity change from 0 to 262160 21:21:15 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x15000) 21:21:15 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10007) 21:21:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1006f) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10082) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, r1) 21:21:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xf400) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:15 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10008) [ 738.873355][T31113] loop3: detected capacity change from 0 to 262160 [ 738.874894][T31115] loop5: detected capacity change from 0 to 262160 [ 738.887031][T31118] loop1: detected capacity change from 0 to 262160 21:21:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10084) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:15 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10009) 21:21:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10086) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:15 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1000a) [ 739.100530][T31132] loop3: detected capacity change from 0 to 262160 21:21:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1008b) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:15 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x15200) 21:21:15 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1000b) 21:21:15 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1000c) [ 739.226015][T31139] loop3: detected capacity change from 0 to 262160 [ 739.226049][ T1917] Buffer I/O error on dev loop3, logical block 0, async page read [ 739.226134][ T1917] Buffer I/O error on dev loop3, logical block 7, async page read 21:21:15 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1000d) 21:21:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1008e) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xf600) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, r1) [ 739.567334][T31148] loop1: detected capacity change from 0 to 262160 [ 739.574853][T31150] loop3: detected capacity change from 0 to 262160 21:21:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xf400) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:16 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x15300) 21:21:16 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1000e) 21:21:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10090) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:16 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1000f) [ 739.675402][T31158] loop5: detected capacity change from 0 to 262160 21:21:16 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x15400) 21:21:16 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10010) [ 739.740477][T31163] loop3: detected capacity change from 0 to 262160 21:21:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10093) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10095) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:16 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10011) [ 739.882612][T31172] loop3: detected capacity change from 0 to 262160 21:21:16 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10022) [ 740.123768][ T1917] blk_print_req_error: 24 callbacks suppressed [ 740.123781][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, 0xffffffffffffffff) 21:21:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10097) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xf800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:16 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x15600) 21:21:16 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10042) 21:21:16 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1000f) [ 740.193797][ T1917] I/O error, dev loop5, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:16 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10045) [ 740.237506][T31181] loop1: detected capacity change from 0 to 262160 [ 740.247035][T31188] loop3: detected capacity change from 0 to 262160 21:21:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, r1) 21:21:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10099) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:16 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10048) 21:21:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x100a3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 740.373762][ T4377] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:16 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1004a) [ 740.446337][T31201] loop3: detected capacity change from 0 to 262160 [ 740.585710][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 740.684090][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, 0xffffffffffffffff) 21:21:17 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1004e) 21:21:17 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x15800) 21:21:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x100a6) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10002) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 740.779838][T31207] loop3: detected capacity change from 0 to 262160 [ 740.785966][T31209] loop1: detected capacity change from 0 to 262160 21:21:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x100a7) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10003) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xf800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:17 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10050) [ 740.903677][ T4377] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 740.914881][T31218] loop1: detected capacity change from 0 to 262160 [ 740.919941][T31221] loop5: detected capacity change from 0 to 262160 [ 740.930485][ T4377] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 740.940117][ T4377] Buffer I/O error on dev loop1, logical block 32752, async page read 21:21:17 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10052) 21:21:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x100a9) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 740.957375][ T1902] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10004) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 741.039495][T31228] loop3: detected capacity change from 0 to 262160 [ 741.046918][ T4377] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 741.177870][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, 0xffffffffffffffff) 21:21:17 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10054) 21:21:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10005) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x100ad) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:17 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x15900) 21:21:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xe600) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:17 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10056) 21:21:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10006) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 741.346988][T31234] loop3: detected capacity change from 0 to 262160 [ 741.359272][T31238] loop1: detected capacity change from 0 to 262160 [ 741.359901][T31239] loop5: detected capacity change from 0 to 262160 21:21:17 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10058) 21:21:17 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x15b00) 21:21:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x100b2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10007) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 741.549398][T31253] loop3: detected capacity change from 0 to 262160 [ 741.563269][T31255] loop1: detected capacity change from 0 to 262160 21:21:18 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x15d00) 21:21:18 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1005a) 21:21:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x100b3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10008) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xf400) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xd400) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:18 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1005c) [ 741.859096][T31258] loop1: detected capacity change from 0 to 262160 [ 741.867341][T31262] loop3: detected capacity change from 0 to 262160 [ 741.881879][T31266] loop5: detected capacity change from 0 to 262160 [ 741.896965][T31267] loop4: detected capacity change from 0 to 262160 21:21:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x100b4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10009) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:18 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x15e00) 21:21:18 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1005d) 21:21:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x1000a) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 742.019438][T31273] loop3: detected capacity change from 0 to 262160 21:21:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x100b5) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:18 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1005e) [ 742.083499][T31279] loop1: detected capacity change from 0 to 262160 21:21:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x100b6) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:18 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1005f) [ 742.217909][T31287] loop3: detected capacity change from 0 to 262160 21:21:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x100b8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xe600) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:18 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10060) 21:21:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x1000b) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:18 executing program 4: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x15d00) 21:21:18 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x15f00) 21:21:18 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10062) [ 742.421934][T31292] loop3: detected capacity change from 0 to 262160 [ 742.430150][T31298] loop1: detected capacity change from 0 to 262160 21:21:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x100bc) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x1000c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:18 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10064) 21:21:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x100bd) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:18 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x16000) 21:21:18 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10065) [ 742.611353][T31312] loop3: detected capacity change from 0 to 262160 21:21:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xc200) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x1000d) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:19 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10060) 21:21:19 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10067) 21:21:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x100f1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:19 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x16200) 21:21:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 742.853929][T31319] loop3: detected capacity change from 0 to 262160 [ 742.865282][T31326] loop1: detected capacity change from 0 to 262160 [ 742.885428][T31328] loop5: detected capacity change from 0 to 262160 21:21:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x101a0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:19 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10068) 21:21:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x1000e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10204) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:19 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10069) [ 743.045965][T31340] loop3: detected capacity change from 0 to 262160 21:21:19 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000480)={0x0, 0x0, "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", "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"}) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './bus\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000000280)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4, 0x3}]}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0x19, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x472, 0x45}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x30}}, 0x841) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r5, 0x0, 0x10000) 21:21:19 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1006b) 21:21:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10281) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x1000f) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:19 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x16400) [ 743.242678][T31350] loop1: detected capacity change from 0 to 262160 [ 743.244799][T31347] loop3: detected capacity change from 0 to 262160 21:21:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10010) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 743.331798][T31352] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 21:21:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xc000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:19 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1006c) 21:21:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10300) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10011) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:19 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x16500) 21:21:19 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1006e) [ 743.526641][T31357] loop3: detected capacity change from 0 to 262160 [ 743.535110][T31360] loop1: detected capacity change from 0 to 262160 [ 743.547118][T31362] loop4: detected capacity change from 0 to 262160 21:21:20 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000480)={0x0, 0x0, "30df94546d0263bbc90e1c1903329ff64d2f3dd8eba17bba1710a5e650771a8f1bc6bd62d28da715c8f0b025244676d682cb9066e98c7724d5d54e3b8dfbce02dfefbee1bbc154a02e8dd89620d427080179821099d78d5db479940937df1797c2f370332d08aafd44d3cdb23d3bc729a363db9baecb1ea96f4bec2083b27fdd4f1a6488ff44c9d5722fe43b6f483e45da349154aaa6ed265aac63b97d1a3aee93c077dd50f9d13fd7d6374e4db81b96ce9790d152814178315bde618f0d3c3f785bf667c186cccfbb7fdd0067e4f77083032a1b332f65642855f05f4201c4ef4a3f13bcce006be6d1c6d7ad0769b61d969b6defefa7bd7b27d0157211f4572f", "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"}) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './bus\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000000280)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4, 0x3}]}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0x19, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x472, 0x45}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x30}}, 0x841) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r5, 0x0, 0x10000) 21:21:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10402) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x100f2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:20 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1006f) 21:21:20 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x16600) 21:21:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 743.787137][T31372] loop1: detected capacity change from 0 to 262160 [ 743.795272][T31376] loop3: detected capacity change from 0 to 262160 21:21:20 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10070) 21:21:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10406) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x101c0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 743.852164][T31379] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 21:21:20 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10071) 21:21:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10204) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:20 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10073) [ 743.990740][T31390] loop1: detected capacity change from 0 to 262160 21:21:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10204) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10408) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10300) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:20 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10074) 21:21:20 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x16700) 21:21:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:20 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10075) [ 744.336739][T31397] loop1: detected capacity change from 0 to 262160 [ 744.340282][T31400] loop3: detected capacity change from 0 to 262160 21:21:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10402) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:20 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10076) [ 744.405227][T31406] loop5: detected capacity change from 0 to 262160 21:21:20 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10078) 21:21:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10500) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xd800) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 744.472474][T31411] loop1: detected capacity change from 0 to 262160 21:21:20 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x16800) 21:21:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10406) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10600) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:20 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1007b) 21:21:21 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1007d) [ 744.597945][T31421] loop1: detected capacity change from 0 to 262160 [ 744.606216][T31425] loop3: detected capacity change from 0 to 262160 21:21:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xd600) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10408) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:21 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10082) 21:21:21 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x16900) 21:21:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10604) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0xb800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 745.031050][T31432] loop3: detected capacity change from 0 to 262160 [ 745.034477][T31437] loop1: detected capacity change from 0 to 262160 [ 745.071134][T31439] loop4: detected capacity change from 0 to 262160 21:21:21 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x100b2) 21:21:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10500) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10700) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 745.082199][T31441] loop5: detected capacity change from 0 to 262160 21:21:21 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x16a00) 21:21:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10804) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 745.171508][T31448] loop1: detected capacity change from 0 to 262160 [ 745.193692][ T1917] blk_print_req_error: 27 callbacks suppressed [ 745.193708][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:21 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x100b4) [ 745.259846][T31452] loop3: detected capacity change from 0 to 262160 [ 745.374647][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 745.385337][ T4377] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10600) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:21 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xc600) 21:21:21 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x100b6) 21:21:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10900) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:21 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xc800) 21:21:21 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x100b8) [ 745.502506][T31462] loop3: detected capacity change from 0 to 262160 [ 745.504988][T31463] loop1: detected capacity change from 0 to 262160 [ 745.517026][ T1917] I/O error, dev loop5, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:21 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x16b00) 21:21:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10a00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 745.573693][ T6158] I/O error, dev loop4, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:22 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x100b9) 21:21:22 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x100ba) [ 745.664431][ T4377] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:22 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x100bd) 21:21:22 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x16c00) 21:21:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10604) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:22 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x100f1) 21:21:22 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xc600) 21:21:22 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x16e00) 21:21:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xcc00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 746.162126][T31489] loop5: detected capacity change from 0 to 262160 21:21:22 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10180) 21:21:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10b00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 746.204391][ T4377] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10700) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:22 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10204) [ 746.252113][T31495] loop3: detected capacity change from 0 to 262160 [ 746.280343][T31497] loop1: detected capacity change from 0 to 262160 21:21:22 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10281) 21:21:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10c00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10804) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 746.415837][ T4377] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 746.424030][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10804) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:22 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10300) 21:21:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10900) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 746.603461][T31511] loop1: detected capacity change from 0 to 262160 [ 746.644246][ T4377] I/O error, dev loop5, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xc800) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:23 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x17000) 21:21:23 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10402) 21:21:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10a00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10a00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:23 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10406) [ 746.762141][T31519] loop1: detected capacity change from 0 to 262160 [ 746.769735][T31521] loop5: detected capacity change from 0 to 262160 21:21:23 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10408) [ 746.805386][T31523] loop4: detected capacity change from 0 to 262160 21:21:23 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10500) 21:21:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10d00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:23 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x17100) 21:21:23 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) [ 747.101595][T31534] loop3: detected capacity change from 0 to 262160 21:21:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10e00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:23 executing program 4: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc400) 21:21:23 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x17400) 21:21:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x2000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10b00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10c00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 747.498899][T31551] loop1: detected capacity change from 0 to 262160 21:21:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x2000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x1800) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 747.581559][T31555] loop5: detected capacity change from 0 to 262160 [ 747.611736][T31557] loop4: detected capacity change from 0 to 262160 21:21:24 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x17700) 21:21:24 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x400, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./bus\x00', 0x1}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@ah={{0x30}}, @common=@icmp={{0x28}, {0x0, "401f"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r1, r2, 0x0, 0x10000) 21:21:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 747.775576][T31563] xt_check_table_hooks: 25 callbacks suppressed [ 747.775601][T31563] x_tables: duplicate underflow at hook 3 21:21:24 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10604) 21:21:24 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x17a00) 21:21:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10d00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x10f00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:24 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10700) 21:21:24 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10804) [ 748.094749][T31572] loop1: detected capacity change from 0 to 262160 [ 748.131730][T31576] loop3: detected capacity change from 0 to 262160 21:21:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10e00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:24 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10900) 21:21:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x11100) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:24 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10a00) 21:21:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0xe00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x12200) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:24 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x17c00) 21:21:24 executing program 4: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2000) 21:21:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) (fail_nth: 1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 748.590617][T31593] loop3: detected capacity change from 0 to 262160 [ 748.621313][T31596] loop5: detected capacity change from 0 to 262160 [ 748.710451][T31599] FAULT_INJECTION: forcing a failure. [ 748.710451][T31599] name failslab, interval 1, probability 0, space 0, times 0 [ 748.723366][T31599] CPU: 0 PID: 31599 Comm: syz-executor.4 Not tainted 5.16.0-syzkaller #0 [ 748.731817][T31599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.741887][T31599] Call Trace: [ 748.745286][T31599] [ 748.748226][T31599] dump_stack_lvl+0xd6/0x122 [ 748.752839][T31599] dump_stack+0x11/0x1b [ 748.757015][T31599] should_fail+0x23c/0x250 [ 748.761624][T31599] ? alloc_pipe_info+0xac/0x350 [ 748.766557][T31599] __should_failslab+0x81/0x90 [ 748.771361][T31599] should_failslab+0x5/0x20 [ 748.775889][T31599] kmem_cache_alloc_trace+0x52/0x350 [ 748.781189][T31599] alloc_pipe_info+0xac/0x350 [ 748.785879][T31599] splice_direct_to_actor+0x5f7/0x650 [ 748.791342][T31599] ? security_file_permission+0x7c/0xa0 [ 748.796905][T31599] ? do_splice_direct+0x190/0x190 [ 748.801996][T31599] ? security_file_permission+0x87/0xa0 [ 748.807709][T31599] do_splice_direct+0x106/0x190 [ 748.812590][T31599] do_sendfile+0x675/0xc40 [ 748.817024][T31599] __x64_sys_sendfile64+0x102/0x140 [ 748.822244][T31599] do_syscall_64+0x44/0xd0 [ 748.826670][T31599] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 748.832579][T31599] RIP: 0033:0x7facc1c04fe9 [ 748.837036][T31599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 21:21:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 1) [ 748.856710][T31599] RSP: 002b:00007facc0d7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 748.865139][T31599] RAX: ffffffffffffffda RBX: 00007facc1d17f60 RCX: 00007facc1c04fe9 [ 748.873123][T31599] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000000006 [ 748.881112][T31599] RBP: 00007facc0d7b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 748.889147][T31599] R10: 0000000000010600 R11: 0000000000000246 R12: 0000000000000001 [ 748.897159][T31599] R13: 00007fffa9041f8f R14: 00007facc0d7b300 R15: 0000000000022000 [ 748.905218][T31599] 21:21:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) (fail_nth: 2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 748.915973][ T1917] Buffer I/O error on dev loop5, logical block 32752, async page read [ 748.942707][T31602] FAULT_INJECTION: forcing a failure. [ 748.942707][T31602] name failslab, interval 1, probability 0, space 0, times 0 [ 748.955468][T31602] CPU: 1 PID: 31602 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 748.959404][T31604] FAULT_INJECTION: forcing a failure. [ 748.959404][T31604] name failslab, interval 1, probability 0, space 0, times 0 [ 748.963947][T31602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.963962][T31602] Call Trace: [ 748.963969][T31602] [ 748.963976][T31602] dump_stack_lvl+0xd6/0x122 [ 748.997816][T31602] dump_stack+0x11/0x1b [ 749.002089][T31602] should_fail+0x23c/0x250 [ 749.006505][T31602] ? alloc_pipe_info+0xac/0x350 [ 749.011384][T31602] __should_failslab+0x81/0x90 [ 749.016213][T31602] should_failslab+0x5/0x20 [ 749.020780][T31602] kmem_cache_alloc_trace+0x52/0x350 [ 749.026080][T31602] alloc_pipe_info+0xac/0x350 [ 749.030800][T31602] splice_direct_to_actor+0x5f7/0x650 [ 749.036242][T31602] ? security_file_permission+0x7c/0xa0 [ 749.041798][T31602] ? do_splice_direct+0x190/0x190 [ 749.046908][T31602] ? security_file_permission+0x87/0xa0 [ 749.052520][T31602] do_splice_direct+0x106/0x190 [ 749.057401][T31602] do_sendfile+0x675/0xc40 [ 749.061910][T31602] __x64_sys_sendfile64+0x102/0x140 [ 749.067228][T31602] do_syscall_64+0x44/0xd0 [ 749.071685][T31602] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 749.077618][T31602] RIP: 0033:0x7f6a12c1cfe9 [ 749.082028][T31602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 749.101681][T31602] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 749.110098][T31602] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 [ 749.118076][T31602] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 749.126046][T31602] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 [ 749.134362][T31602] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 749.142344][T31602] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 [ 749.150321][T31602] [ 749.153356][T31604] CPU: 0 PID: 31604 Comm: syz-executor.4 Not tainted 5.16.0-syzkaller #0 [ 749.161784][T31604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 749.171930][T31604] Call Trace: [ 749.175277][T31604] [ 749.178202][T31604] dump_stack_lvl+0xd6/0x122 [ 749.182810][T31604] dump_stack+0x11/0x1b [ 749.186978][T31604] should_fail+0x23c/0x250 [ 749.191406][T31604] ? kcalloc+0x32/0x40 [ 749.195520][T31604] __should_failslab+0x81/0x90 [ 749.200570][T31604] should_failslab+0x5/0x20 [ 749.205154][T31604] __kmalloc+0x6f/0x370 [ 749.209372][T31604] ? kmem_cache_alloc_trace+0x24b/0x350 [ 749.214935][T31604] kcalloc+0x32/0x40 [ 749.218877][T31604] alloc_pipe_info+0x1be/0x350 [ 749.223712][T31604] splice_direct_to_actor+0x5f7/0x650 [ 749.229144][T31604] ? security_file_permission+0x7c/0xa0 [ 749.234705][T31604] ? do_splice_direct+0x190/0x190 [ 749.239854][T31604] ? security_file_permission+0x87/0xa0 [ 749.245488][T31604] do_splice_direct+0x106/0x190 [ 749.250353][T31604] do_sendfile+0x675/0xc40 [ 749.254784][T31604] __x64_sys_sendfile64+0x102/0x140 [ 749.260006][T31604] do_syscall_64+0x44/0xd0 [ 749.264484][T31604] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 749.270422][T31604] RIP: 0033:0x7facc1c04fe9 [ 749.274839][T31604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 749.294903][T31604] RSP: 002b:00007facc0d7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 749.296500][T31609] loop5: detected capacity change from 0 to 262160 [ 749.303498][T31604] RAX: ffffffffffffffda RBX: 00007facc1d17f60 RCX: 00007facc1c04fe9 21:21:25 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10b00) 21:21:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x10f00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 2) 21:21:25 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x17f00) 21:21:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) (fail_nth: 3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x139ae) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 749.303561][T31604] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000000006 [ 749.303573][T31604] RBP: 00007facc0d7b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 749.303585][T31604] R10: 0000000000010600 R11: 0000000000000246 R12: 0000000000000001 [ 749.303618][T31604] R13: 00007fffa9041f8f R14: 00007facc0d7b300 R15: 0000000000022000 [ 749.303638][T31604] [ 749.360993][T31610] loop1: detected capacity change from 0 to 262160 [ 749.402261][T31614] FAULT_INJECTION: forcing a failure. [ 749.402261][T31614] name failslab, interval 1, probability 0, space 0, times 0 [ 749.415660][T31614] CPU: 1 PID: 31614 Comm: syz-executor.4 Not tainted 5.16.0-syzkaller #0 [ 749.421551][T31609] FAULT_INJECTION: forcing a failure. [ 749.421551][T31609] name failslab, interval 1, probability 0, space 0, times 0 [ 749.424097][T31614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 749.424111][T31614] Call Trace: [ 749.424117][T31614] [ 749.424124][T31614] dump_stack_lvl+0xd6/0x122 [ 749.457701][T31614] dump_stack+0x11/0x1b [ 749.461885][T31614] should_fail+0x23c/0x250 [ 749.466335][T31614] ? __iomap_dio_rw+0x143/0x10b0 [ 749.471268][T31614] __should_failslab+0x81/0x90 [ 749.476113][T31614] should_failslab+0x5/0x20 [ 749.480813][T31614] kmem_cache_alloc_trace+0x52/0x350 [ 749.486104][T31614] ? visit_groups_merge+0x1a78/0x1aa0 [ 749.491480][T31614] __iomap_dio_rw+0x143/0x10b0 [ 749.496243][T31614] ? __this_cpu_preempt_check+0x18/0x20 [ 749.501784][T31614] ? __perf_event_task_sched_in+0x898/0x8d0 [ 749.507673][T31614] iomap_dio_rw+0x38/0x80 [ 749.512008][T31614] ext4_file_read_iter+0x190/0x1f0 [ 749.517116][T31614] generic_file_splice_read+0x24f/0x330 [ 749.522735][T31614] ? splice_shrink_spd+0x60/0x60 [ 749.527729][T31614] splice_direct_to_actor+0x2aa/0x650 [ 749.533097][T31614] ? do_splice_direct+0x190/0x190 [ 749.538178][T31614] do_splice_direct+0x106/0x190 [ 749.543095][T31614] do_sendfile+0x675/0xc40 [ 749.547701][T31614] __x64_sys_sendfile64+0x102/0x140 [ 749.552891][T31614] do_syscall_64+0x44/0xd0 [ 749.557303][T31614] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 749.563190][T31614] RIP: 0033:0x7facc1c04fe9 [ 749.567709][T31614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 749.587306][T31614] RSP: 002b:00007facc0d7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 749.595706][T31614] RAX: ffffffffffffffda RBX: 00007facc1d17f60 RCX: 00007facc1c04fe9 [ 749.603672][T31614] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000000006 [ 749.611634][T31614] RBP: 00007facc0d7b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 749.619684][T31614] R10: 0000000000010600 R11: 0000000000000246 R12: 0000000000000001 [ 749.627648][T31614] R13: 00007fffa9041f8f R14: 00007facc0d7b300 R15: 0000000000022000 [ 749.635689][T31614] [ 749.638756][T31609] CPU: 0 PID: 31609 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 749.647204][T31609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 749.657261][T31609] Call Trace: [ 749.660545][T31609] [ 749.663555][T31609] dump_stack_lvl+0xd6/0x122 [ 749.668233][T31609] dump_stack+0x11/0x1b [ 749.672455][T31609] should_fail+0x23c/0x250 [ 749.676883][T31609] ? kcalloc+0x32/0x40 [ 749.680968][T31609] __should_failslab+0x81/0x90 [ 749.685789][T31609] should_failslab+0x5/0x20 [ 749.690385][T31609] __kmalloc+0x6f/0x370 [ 749.694573][T31609] ? kmem_cache_alloc_trace+0x24b/0x350 [ 749.700140][T31609] kcalloc+0x32/0x40 21:21:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x11100) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:26 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10c00) 21:21:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) (fail_nth: 4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 749.704049][T31609] alloc_pipe_info+0x1be/0x350 [ 749.708937][T31609] splice_direct_to_actor+0x5f7/0x650 [ 749.714420][T31609] ? security_file_permission+0x7c/0xa0 [ 749.720121][T31609] ? do_splice_direct+0x190/0x190 [ 749.725232][T31609] ? security_file_permission+0x87/0xa0 [ 749.730827][T31609] do_splice_direct+0x106/0x190 [ 749.735772][T31609] do_sendfile+0x675/0xc40 [ 749.740210][T31609] __x64_sys_sendfile64+0x102/0x140 [ 749.745480][T31609] do_syscall_64+0x44/0xd0 [ 749.749992][T31609] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 749.755907][T31609] RIP: 0033:0x7f6a12c1cfe9 [ 749.760331][T31609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 749.768421][T31621] FAULT_INJECTION: forcing a failure. [ 749.768421][T31621] name failslab, interval 1, probability 0, space 0, times 0 [ 749.779966][T31609] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 21:21:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 3) [ 749.780031][T31609] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 [ 749.780046][T31609] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 749.780058][T31609] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 [ 749.780071][T31609] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 749.780154][T31609] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 [ 749.780173][T31609] [ 749.846891][T31621] CPU: 1 PID: 31621 Comm: syz-executor.4 Not tainted 5.16.0-syzkaller #0 [ 749.855291][T31621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 749.865366][T31621] Call Trace: [ 749.868632][T31621] [ 749.871566][T31621] dump_stack_lvl+0xd6/0x122 [ 749.876322][T31621] dump_stack+0x11/0x1b [ 749.880465][T31621] should_fail+0x23c/0x250 [ 749.884943][T31621] ? kcalloc+0x32/0x50 [ 749.889004][T31621] __should_failslab+0x81/0x90 [ 749.893926][T31621] should_failslab+0x5/0x20 [ 749.898449][T31621] __kmalloc+0x6f/0x370 [ 749.902772][T31621] ? lapic_next_event+0x2d/0x40 [ 749.907714][T31621] ? clockevents_program_event+0x195/0x1e0 [ 749.913528][T31621] kcalloc+0x32/0x50 [ 749.917434][T31621] ext4_find_extent+0x1d5/0x660 [ 749.922332][T31621] ? hrtimer_start_range_ns+0x11e/0x140 [ 749.927921][T31621] ext4_ext_map_blocks+0xee/0x1940 [ 749.933020][T31621] ? _raw_read_unlock+0x13/0x30 [ 749.937871][T31621] ext4_map_blocks+0x183/0xb90 [ 749.942666][T31621] ext4_iomap_begin+0x147/0x550 [ 749.947584][T31621] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 749.952771][T31621] iomap_iter+0x395/0x4a0 [ 749.957109][T31621] __iomap_dio_rw+0x6f2/0x10b0 [ 749.961862][T31621] iomap_dio_rw+0x38/0x80 [ 749.966195][T31621] ext4_file_read_iter+0x190/0x1f0 [ 749.971307][T31621] generic_file_splice_read+0x24f/0x330 [ 749.976846][T31621] ? splice_shrink_spd+0x60/0x60 [ 749.981917][T31621] splice_direct_to_actor+0x2aa/0x650 [ 749.987277][T31621] ? do_splice_direct+0x190/0x190 [ 749.992377][T31621] do_splice_direct+0x106/0x190 [ 749.997216][T31621] do_sendfile+0x675/0xc40 [ 750.001617][T31621] __x64_sys_sendfile64+0x102/0x140 [ 750.006847][T31621] do_syscall_64+0x44/0xd0 [ 750.011248][T31621] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 750.017212][T31621] RIP: 0033:0x7facc1c04fe9 [ 750.021637][T31621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 750.041231][T31621] RSP: 002b:00007facc0d7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 750.049689][T31621] RAX: ffffffffffffffda RBX: 00007facc1d17f60 RCX: 00007facc1c04fe9 [ 750.057717][T31621] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000000006 [ 750.065674][T31621] RBP: 00007facc0d7b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 750.073631][T31621] R10: 0000000000010600 R11: 0000000000000246 R12: 0000000000000001 [ 750.081605][T31621] R13: 00007fffa9041f8f R14: 00007facc0d7b300 R15: 0000000000022000 [ 750.089565][T31621] 21:21:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) (fail_nth: 5) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 750.102360][ T4377] Buffer I/O error on dev loop5, logical block 32752, async page read [ 750.122386][ T1902] Buffer I/O error on dev loop1, logical block 32752, async page read [ 750.141270][T31628] FAULT_INJECTION: forcing a failure. [ 750.141270][T31628] name failslab, interval 1, probability 0, space 0, times 0 [ 750.153953][T31628] CPU: 1 PID: 31628 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 750.163193][T31628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 750.173349][T31628] Call Trace: [ 750.175265][T31630] FAULT_INJECTION: forcing a failure. [ 750.175265][T31630] name failslab, interval 1, probability 0, space 0, times 0 [ 750.176637][T31628] [ 750.176646][T31628] dump_stack_lvl+0xd6/0x122 [ 750.176676][T31628] dump_stack+0x11/0x1b [ 750.176740][T31628] should_fail+0x23c/0x250 [ 750.176761][T31628] ? __iomap_dio_rw+0x143/0x10b0 [ 750.211079][T31628] __should_failslab+0x81/0x90 [ 750.215943][T31628] should_failslab+0x5/0x20 [ 750.220464][T31628] kmem_cache_alloc_trace+0x52/0x350 [ 750.225759][T31628] __iomap_dio_rw+0x143/0x10b0 [ 750.230539][T31628] ? avc_has_perm+0xd5/0x160 [ 750.235135][T31628] iomap_dio_rw+0x38/0x80 [ 750.239472][T31628] ext4_file_read_iter+0x190/0x1f0 [ 750.244722][T31628] generic_file_splice_read+0x24f/0x330 [ 750.250302][T31628] ? splice_shrink_spd+0x60/0x60 [ 750.255279][T31628] splice_direct_to_actor+0x2aa/0x650 [ 750.260657][T31628] ? do_splice_direct+0x190/0x190 [ 750.265688][T31628] do_splice_direct+0x106/0x190 [ 750.270557][T31628] do_sendfile+0x675/0xc40 [ 750.274981][T31628] __x64_sys_sendfile64+0x102/0x140 [ 750.280337][T31628] do_syscall_64+0x44/0xd0 [ 750.284754][T31628] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 750.290650][T31628] RIP: 0033:0x7f6a12c1cfe9 [ 750.295076][T31628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 750.314827][T31628] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 750.323239][T31628] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 [ 750.331278][T31628] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 750.339244][T31628] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 [ 750.347282][T31628] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 750.355249][T31628] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 [ 750.363222][T31628] [ 750.366277][T31630] CPU: 0 PID: 31630 Comm: syz-executor.4 Not tainted 5.16.0-syzkaller #0 [ 750.374707][T31630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 750.384775][T31630] Call Trace: [ 750.388065][T31630] [ 750.390994][T31630] dump_stack_lvl+0xd6/0x122 [ 750.395769][T31630] dump_stack+0x11/0x1b [ 750.399942][T31630] should_fail+0x23c/0x250 [ 750.404375][T31630] ? __es_insert_extent+0x43d/0xac0 [ 750.409726][T31630] __should_failslab+0x81/0x90 [ 750.414506][T31630] should_failslab+0x5/0x20 [ 750.419133][T31630] kmem_cache_alloc+0x4f/0x320 [ 750.423918][T31630] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 750.430099][T31630] __es_insert_extent+0x43d/0xac0 [ 750.435132][T31630] ext4_es_insert_extent+0x1bb/0x15c0 [ 750.440517][T31630] ? ext4_find_extent+0x53c/0x660 [ 750.445558][T31630] ext4_ext_map_blocks+0xbfe/0x1940 [ 750.450851][T31630] ext4_map_blocks+0x183/0xb90 [ 750.454840][T31636] loop5: detected capacity change from 0 to 262160 [ 750.455700][T31630] ext4_iomap_begin+0x147/0x550 [ 750.455734][T31630] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 750.472366][T31630] iomap_iter+0x395/0x4a0 [ 750.476815][T31630] __iomap_dio_rw+0x6f2/0x10b0 [ 750.481618][T31630] ? perf_output_begin_forward+0x4fb/0x5b0 [ 750.487442][T31630] iomap_dio_rw+0x38/0x80 [ 750.491824][T31630] ext4_file_read_iter+0x190/0x1f0 [ 750.496953][T31630] generic_file_splice_read+0x24f/0x330 [ 750.502671][T31630] ? splice_shrink_spd+0x60/0x60 [ 750.507647][T31630] splice_direct_to_actor+0x2aa/0x650 [ 750.513027][T31630] ? do_splice_direct+0x190/0x190 [ 750.518056][T31630] do_splice_direct+0x106/0x190 [ 750.522908][T31630] do_sendfile+0x675/0xc40 [ 750.527324][T31630] __x64_sys_sendfile64+0x102/0x140 [ 750.532527][T31630] do_syscall_64+0x44/0xd0 [ 750.536934][T31630] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 750.542823][T31630] RIP: 0033:0x7facc1c04fe9 [ 750.547250][T31630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 750.566862][T31630] RSP: 002b:00007facc0d7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 750.575274][T31630] RAX: ffffffffffffffda RBX: 00007facc1d17f60 RCX: 00007facc1c04fe9 [ 750.583307][T31630] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000000006 [ 750.591271][T31630] RBP: 00007facc0d7b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 750.599237][T31630] R10: 0000000000010600 R11: 0000000000000246 R12: 0000000000000001 21:21:26 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x18102) 21:21:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 4) [ 750.607276][T31630] R13: 00007fffa9041f8f R14: 00007facc0d7b300 R15: 0000000000022000 [ 750.615241][T31630] [ 750.626932][T31637] FAULT_INJECTION: forcing a failure. [ 750.626932][T31637] name failslab, interval 1, probability 0, space 0, times 0 [ 750.639763][T31637] CPU: 0 PID: 31637 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 750.648321][T31637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 750.658385][T31637] Call Trace: [ 750.661671][T31637] [ 750.664609][T31637] dump_stack_lvl+0xd6/0x122 [ 750.669213][T31637] dump_stack+0x11/0x1b [ 750.673389][T31637] should_fail+0x23c/0x250 [ 750.677922][T31637] ? kcalloc+0x32/0x50 [ 750.682001][T31637] __should_failslab+0x81/0x90 [ 750.686866][T31637] should_failslab+0x5/0x20 [ 750.691393][T31637] __kmalloc+0x6f/0x370 [ 750.695564][T31637] ? chksum_update+0x39/0x50 [ 750.700164][T31637] kcalloc+0x32/0x50 [ 750.704234][T31637] ext4_find_extent+0x1d5/0x660 [ 750.709151][T31637] ext4_ext_map_blocks+0xee/0x1940 [ 750.714287][T31637] ? __this_cpu_preempt_check+0x18/0x20 [ 750.719944][T31637] ? _raw_read_unlock+0x13/0x30 [ 750.724821][T31637] ext4_map_blocks+0x183/0xb90 [ 750.729675][T31637] ? should_fail+0x2a/0x250 [ 750.734281][T31637] ext4_iomap_begin+0x147/0x550 [ 750.735901][T31641] loop3: detected capacity change from 0 to 262160 [ 750.739311][T31637] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 750.751061][T31637] iomap_iter+0x395/0x4a0 [ 750.755412][T31637] __iomap_dio_rw+0x6f2/0x10b0 [ 750.760221][T31637] iomap_dio_rw+0x38/0x80 [ 750.763285][T31643] loop1: detected capacity change from 0 to 262160 [ 750.764627][T31637] ext4_file_read_iter+0x190/0x1f0 [ 750.776223][T31637] generic_file_splice_read+0x24f/0x330 [ 750.781824][T31637] ? splice_shrink_spd+0x60/0x60 [ 750.786783][T31637] splice_direct_to_actor+0x2aa/0x650 [ 750.792350][T31637] ? do_splice_direct+0x190/0x190 [ 750.797413][T31637] do_splice_direct+0x106/0x190 [ 750.802350][T31637] do_sendfile+0x675/0xc40 [ 750.806896][T31637] __x64_sys_sendfile64+0x102/0x140 [ 750.812135][T31637] do_syscall_64+0x44/0xd0 [ 750.816553][T31637] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 750.822508][T31637] RIP: 0033:0x7f6a12c1cfe9 [ 750.826912][T31637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 750.846511][T31637] RSP: 002b:00007f6a11d72168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 21:21:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x13aae) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:27 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10d00) 21:21:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x11f00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:27 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x18200) 21:21:27 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10e00) [ 750.855019][T31637] RAX: ffffffffffffffda RBX: 00007f6a12d30030 RCX: 00007f6a12c1cfe9 [ 750.863028][T31637] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 750.871085][T31637] RBP: 00007f6a11d721d0 R08: 0000000000000000 R09: 0000000000000000 [ 750.879046][T31637] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 750.887005][T31637] R13: 00007fffd76bfacf R14: 00007f6a11d72300 R15: 0000000000022000 [ 750.895143][T31637] 21:21:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x12000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 5) [ 751.005854][ T1917] blk_print_req_error: 17 callbacks suppressed [ 751.005868][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 751.006071][ T4377] I/O error, dev loop5, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 751.052259][T31652] loop1: detected capacity change from 0 to 262160 [ 751.064838][T31653] loop5: detected capacity change from 0 to 262160 [ 751.091392][T31653] FAULT_INJECTION: forcing a failure. [ 751.091392][T31653] name failslab, interval 1, probability 0, space 0, times 0 [ 751.104068][T31653] CPU: 0 PID: 31653 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 751.112525][T31653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 751.122619][T31653] Call Trace: [ 751.125903][T31653] [ 751.128836][T31653] dump_stack_lvl+0xd6/0x122 [ 751.133595][T31653] dump_stack+0x11/0x1b [ 751.137842][T31653] should_fail+0x23c/0x250 [ 751.142275][T31653] ? __blockdev_direct_IO+0x145/0x2420 [ 751.148227][T31653] __should_failslab+0x81/0x90 [ 751.153022][T31653] should_failslab+0x5/0x20 [ 751.157603][T31653] kmem_cache_alloc+0x4f/0x320 [ 751.162393][T31653] __blockdev_direct_IO+0x145/0x2420 [ 751.167807][T31653] ? schedule+0x8b/0xb0 [ 751.172015][T31653] ? fat_block_truncate_page+0x30/0x30 [ 751.177570][T31653] ? debug_smp_processor_id+0x18/0x20 [ 751.182955][T31653] ? free_unref_page_list+0x1f3/0x230 [ 751.188354][T31653] ? release_pages+0x7b2/0x7e0 [ 751.193212][T31653] fat_direct_IO+0x111/0x1e0 [ 751.197888][T31653] generic_file_read_iter+0x231/0x320 [ 751.203283][T31653] ? iov_iter_pipe+0x100/0x150 [ 751.208064][T31653] generic_file_splice_read+0x24f/0x330 [ 751.213637][T31653] ? splice_shrink_spd+0x60/0x60 [ 751.218702][T31653] splice_direct_to_actor+0x2aa/0x650 [ 751.224166][T31653] ? do_splice_direct+0x190/0x190 [ 751.229256][T31653] do_splice_direct+0x106/0x190 [ 751.234125][T31653] do_sendfile+0x675/0xc40 [ 751.238629][T31653] __x64_sys_sendfile64+0x102/0x140 [ 751.243863][T31653] do_syscall_64+0x44/0xd0 [ 751.248328][T31653] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 751.254378][T31653] RIP: 0033:0x7f6a12c1cfe9 [ 751.258919][T31653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 751.278565][T31653] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 751.287207][T31653] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 [ 751.295247][T31653] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 21:21:27 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x190a8) 21:21:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x13bae) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 6) [ 751.303230][T31653] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 [ 751.311246][T31653] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 751.319305][T31653] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 [ 751.327295][T31653] [ 751.364614][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 751.369768][T31662] loop3: detected capacity change from 0 to 262160 [ 751.383201][T31664] FAULT_INJECTION: forcing a failure. [ 751.383201][T31664] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 751.396518][T31664] CPU: 0 PID: 31664 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 751.398974][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 751.405009][T31664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 751.405022][T31664] Call Trace: [ 751.405029][T31664] [ 751.405036][T31664] dump_stack_lvl+0xd6/0x122 [ 751.405063][T31664] dump_stack+0x11/0x1b [ 751.414639][ T1917] Buffer I/O error on dev loop3, logical block 32752, async page read [ 751.447846][T31664] should_fail+0x23c/0x250 [ 751.452277][T31664] __alloc_pages+0x102/0x330 [ 751.456939][T31664] alloc_pages+0x316/0x420 [ 751.461368][T31664] push_pipe+0x267/0x370 [ 751.465631][T31664] iov_iter_zero+0x28c/0xba0 [ 751.470250][T31664] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 751.475463][T31664] ? iomap_iter+0x3b1/0x4a0 [ 751.480063][T31664] __iomap_dio_rw+0xb54/0x10b0 [ 751.484845][T31664] ? avc_has_perm+0x41/0x160 [ 751.489453][T31664] iomap_dio_rw+0x38/0x80 [ 751.493842][T31664] ext4_file_read_iter+0x190/0x1f0 [ 751.499040][T31664] generic_file_splice_read+0x24f/0x330 [ 751.504613][T31664] ? splice_shrink_spd+0x60/0x60 [ 751.509578][T31664] splice_direct_to_actor+0x2aa/0x650 [ 751.514995][T31664] ? do_splice_direct+0x190/0x190 [ 751.520362][T31664] do_splice_direct+0x106/0x190 [ 751.525229][T31664] do_sendfile+0x675/0xc40 [ 751.529840][T31664] __x64_sys_sendfile64+0x102/0x140 [ 751.535058][T31664] do_syscall_64+0x44/0xd0 [ 751.539667][T31664] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 751.545666][T31664] RIP: 0033:0x7f6a12c1cfe9 [ 751.550107][T31664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 751.569728][T31664] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 751.578166][T31664] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 [ 751.586187][T31664] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 751.594253][T31664] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 [ 751.602242][T31664] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 21:21:28 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x191a8) [ 751.610237][T31664] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 [ 751.618224][T31664] [ 751.626054][ T4377] I/O error, dev loop5, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 7) 21:21:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x13cae) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 751.699997][T31669] loop5: detected capacity change from 0 to 262160 [ 751.743710][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 751.754082][T31669] FAULT_INJECTION: forcing a failure. [ 751.754082][T31669] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 751.767335][T31669] CPU: 0 PID: 31669 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 751.775771][T31669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 751.785835][T31669] Call Trace: [ 751.789124][T31669] 21:21:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x13f00) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:28 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10f00) [ 751.792063][T31669] dump_stack_lvl+0xd6/0x122 [ 751.796761][T31669] dump_stack+0x11/0x1b [ 751.800998][T31669] should_fail+0x23c/0x250 [ 751.805476][T31669] __alloc_pages+0x102/0x330 [ 751.810080][T31669] alloc_pages+0x316/0x420 [ 751.814525][T31669] push_pipe+0x267/0x370 [ 751.818856][T31669] iov_iter_get_pages+0x617/0x810 [ 751.823966][T31669] __blockdev_direct_IO+0xaa4/0x2420 [ 751.829273][T31669] ? fat_block_truncate_page+0x30/0x30 [ 751.834782][T31669] ? debug_smp_processor_id+0x18/0x20 21:21:28 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x192a8) [ 751.840171][T31669] ? free_unref_page_list+0x1f3/0x230 [ 751.845576][T31669] ? fat_block_truncate_page+0x30/0x30 [ 751.851057][T31669] fat_direct_IO+0x111/0x1e0 [ 751.855714][T31669] generic_file_read_iter+0x231/0x320 [ 751.861154][T31669] ? iov_iter_pipe+0x100/0x150 [ 751.865941][T31669] generic_file_splice_read+0x24f/0x330 [ 751.871612][T31669] ? splice_shrink_spd+0x60/0x60 [ 751.876572][T31669] splice_direct_to_actor+0x2aa/0x650 [ 751.882020][T31669] ? do_splice_direct+0x190/0x190 [ 751.887110][T31669] do_splice_direct+0x106/0x190 [ 751.892040][T31669] do_sendfile+0x675/0xc40 [ 751.896553][T31669] __x64_sys_sendfile64+0x102/0x140 [ 751.901823][T31669] do_syscall_64+0x44/0xd0 [ 751.906262][T31669] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 751.912243][T31669] RIP: 0033:0x7f6a12c1cfe9 [ 751.916664][T31669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 751.936300][T31669] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 21:21:28 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x11100) 21:21:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xa00) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x13eae) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 751.944739][T31669] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 [ 751.952730][T31669] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 751.960736][T31669] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 [ 751.968720][T31669] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 751.976731][T31669] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 [ 751.984791][T31669] [ 752.003313][T31679] loop3: detected capacity change from 0 to 262160 21:21:28 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x12200) 21:21:28 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x193a8) 21:21:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xc00) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xe00) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 8) 21:21:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x13f00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x14000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 752.224045][ T4377] I/O error, dev loop5, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 752.234021][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 752.240607][T31700] loop1: detected capacity change from 0 to 262160 [ 752.253122][T31696] FAULT_INJECTION: forcing a failure. [ 752.253122][T31696] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 752.266398][T31696] CPU: 1 PID: 31696 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 752.274878][T31696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.284943][T31696] Call Trace: [ 752.288229][T31696] [ 752.291221][T31696] dump_stack_lvl+0xd6/0x122 [ 752.295900][T31696] dump_stack+0x11/0x1b [ 752.300135][T31696] should_fail+0x23c/0x250 [ 752.304569][T31696] __alloc_pages+0x102/0x330 [ 752.309179][T31696] alloc_pages+0x316/0x420 [ 752.313618][T31696] push_pipe+0x267/0x370 [ 752.317881][T31696] iov_iter_zero+0x28c/0xba0 21:21:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1200) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 752.322527][T31696] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 752.327821][T31696] ? iomap_iter+0x3b1/0x4a0 [ 752.332349][T31696] __iomap_dio_rw+0xb54/0x10b0 [ 752.337134][T31696] ? avc_has_perm+0x41/0x160 [ 752.341755][T31696] iomap_dio_rw+0x38/0x80 [ 752.346111][T31696] ext4_file_read_iter+0x190/0x1f0 [ 752.351244][T31696] generic_file_splice_read+0x24f/0x330 [ 752.356912][T31696] ? splice_shrink_spd+0x60/0x60 [ 752.361872][T31696] splice_direct_to_actor+0x2aa/0x650 [ 752.367280][T31696] ? do_splice_direct+0x190/0x190 [ 752.372354][T31696] do_splice_direct+0x106/0x190 [ 752.377236][T31696] do_sendfile+0x675/0xc40 [ 752.381684][T31696] __x64_sys_sendfile64+0x102/0x140 [ 752.386902][T31696] do_syscall_64+0x44/0xd0 [ 752.391327][T31696] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 752.397299][T31696] RIP: 0033:0x7f6a12c1cfe9 [ 752.401715][T31696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 752.421397][T31696] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 752.429834][T31696] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 [ 752.437811][T31696] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 752.445789][T31696] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 [ 752.453841][T31696] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 752.461821][T31696] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 [ 752.469808][T31696] 21:21:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1400) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:28 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x194a8) 21:21:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x1c001) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 752.595467][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x13fae) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1800) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:29 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x14000) 21:21:29 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1a890) 21:21:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 9) 21:21:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x1effd) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 752.891131][T31723] loop3: detected capacity change from 0 to 262160 [ 752.891538][T31722] loop5: detected capacity change from 0 to 262160 [ 752.912098][T31725] loop1: detected capacity change from 0 to 262160 21:21:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1a00) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 752.986334][T31722] FAULT_INJECTION: forcing a failure. [ 752.986334][T31722] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 752.999662][T31722] CPU: 1 PID: 31722 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 753.008089][T31722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.018150][T31722] Call Trace: [ 753.021525][T31722] [ 753.024456][T31722] dump_stack_lvl+0xd6/0x122 [ 753.029070][T31722] dump_stack+0x11/0x1b 21:21:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x14000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 753.033243][T31722] should_fail+0x23c/0x250 [ 753.037671][T31722] __alloc_pages+0x102/0x330 [ 753.042270][T31722] alloc_pages+0x316/0x420 [ 753.046771][T31722] push_pipe+0x267/0x370 [ 753.051082][T31722] iov_iter_get_pages+0x617/0x810 [ 753.056178][T31722] __blockdev_direct_IO+0xaa4/0x2420 [ 753.061575][T31722] ? fat_block_truncate_page+0x30/0x30 [ 753.067085][T31722] ? debug_smp_processor_id+0x18/0x20 [ 753.072508][T31722] ? free_unref_page_list+0x1f3/0x230 [ 753.077941][T31722] ? fat_block_truncate_page+0x30/0x30 [ 753.083516][T31722] fat_direct_IO+0x111/0x1e0 [ 753.088167][T31722] generic_file_read_iter+0x231/0x320 [ 753.093559][T31722] ? iov_iter_pipe+0x100/0x150 [ 753.098339][T31722] generic_file_splice_read+0x24f/0x330 [ 753.103904][T31722] ? splice_shrink_spd+0x60/0x60 [ 753.108991][T31722] splice_direct_to_actor+0x2aa/0x650 [ 753.114430][T31722] ? do_splice_direct+0x190/0x190 [ 753.119495][T31722] do_splice_direct+0x106/0x190 [ 753.124437][T31722] do_sendfile+0x675/0xc40 [ 753.128903][T31722] __x64_sys_sendfile64+0x102/0x140 [ 753.134109][T31722] do_syscall_64+0x44/0xd0 [ 753.138535][T31722] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 753.144531][T31722] RIP: 0033:0x7f6a12c1cfe9 [ 753.148980][T31722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 753.168682][T31722] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 753.177111][T31722] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 21:21:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x1f2ff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 753.185129][T31722] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 753.193353][T31722] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 [ 753.201369][T31722] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 753.209348][T31722] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 [ 753.217345][T31722] [ 753.234952][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 753.264520][T31737] loop1: detected capacity change from 0 to 262160 [ 753.279008][ T4377] ================================================================== [ 753.287100][ T4377] BUG: KCSAN: data-race in delete_from_page_cache_batch / folio_mapping [ 753.295589][ T4377] [ 753.297893][ T4377] write to 0xffffea0004e0ff98 of 8 bytes by task 31737 on cpu 0: [ 753.305607][ T4377] delete_from_page_cache_batch+0x301/0x760 [ 753.311568][ T4377] truncate_inode_pages_range+0x305/0x8b0 [ 753.317264][ T4377] truncate_inode_pages+0x20/0x30 [ 753.322263][ T4377] set_blocksize+0x24e/0x270 [ 753.326831][ T4377] sb_min_blocksize+0x92/0x110 [ 753.331605][ T4377] fat_fill_super+0xe95/0x2af0 [ 753.336358][ T4377] vfat_fill_super+0x2c/0x40 [ 753.340928][ T4377] mount_bdev+0x1e8/0x290 [ 753.345238][ T4377] vfat_mount+0x2d/0x40 [ 753.349383][ T4377] legacy_get_tree+0x70/0xc0 [ 753.353972][ T4377] vfs_get_tree+0x4a/0x1a0 [ 753.358372][ T4377] path_mount+0x11cf/0x1c40 [ 753.362880][ T4377] __se_sys_mount+0x24b/0x2f0 [ 753.367546][ T4377] __x64_sys_mount+0x63/0x70 [ 753.372301][ T4377] do_syscall_64+0x44/0xd0 [ 753.376725][ T4377] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 753.382693][ T4377] [ 753.385002][ T4377] read to 0xffffea0004e0ff98 of 8 bytes by task 4377 on cpu 1: [ 753.392529][ T4377] folio_mapping+0x92/0x120 [ 753.397019][ T4377] __pagevec_lru_add_fn+0x81/0x380 [ 753.402114][ T4377] __pagevec_lru_add+0x1c3/0x270 [ 753.407035][ T4377] folio_add_lru+0x11a/0x160 [ 753.411660][ T4377] filemap_add_folio+0xf8/0x150 [ 753.416494][ T4377] page_cache_ra_unbounded+0x274/0x400 [ 753.421933][ T4377] force_page_cache_ra+0x1e6/0x220 [ 753.427026][ T4377] page_cache_sync_ra+0xcc/0xe0 [ 753.431874][ T4377] filemap_read+0x3ed/0x1430 [ 753.436447][ T4377] blkdev_read_iter+0xcb/0x350 [ 753.441191][ T4377] vfs_read+0x66c/0x750 [ 753.445430][ T4377] ksys_read+0xd9/0x190 [ 753.449568][ T4377] __x64_sys_read+0x3e/0x50 [ 753.454050][ T4377] do_syscall_64+0x44/0xd0 [ 753.458452][ T4377] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 753.464416][ T4377] [ 753.466839][ T4377] value changed: 0xffff888100455570 -> 0x0000000000000000 [ 753.473932][ T4377] [ 753.476246][ T4377] Reported by Kernel Concurrency Sanitizer on: 21:21:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1c00) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:29 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1a891) [ 753.482547][ T4377] CPU: 1 PID: 4377 Comm: udevd Not tainted 5.16.0-syzkaller #0 [ 753.490100][ T4377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.500151][ T4377] ================================================================== [ 753.515185][ T1917] Buffer I/O error on dev loop3, logical block 32752, async page read 21:21:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 10) [ 753.606287][T31745] FAULT_INJECTION: forcing a failure. [ 753.606287][T31745] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 753.619841][T31745] CPU: 1 PID: 31745 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 753.629167][T31745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.643168][T31745] Call Trace: [ 753.646631][T31745] [ 753.649673][T31745] dump_stack_lvl+0xd6/0x122 [ 753.654494][T31745] dump_stack+0x11/0x1b [ 753.658847][T31745] should_fail+0x23c/0x250 [ 753.663726][T31745] __alloc_pages+0x102/0x330 [ 753.668796][T31745] alloc_pages+0x316/0x420 [ 753.673523][T31745] push_pipe+0x267/0x370 [ 753.678310][T31745] iov_iter_zero+0x28c/0xba0 [ 753.683013][T31745] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 753.688405][T31745] ? iomap_iter+0x3b1/0x4a0 [ 753.692906][T31745] __iomap_dio_rw+0xb54/0x10b0 [ 753.698558][T31745] ? avc_has_perm+0x41/0x160 [ 753.703258][T31745] iomap_dio_rw+0x38/0x80 [ 753.707764][T31745] ext4_file_read_iter+0x190/0x1f0 [ 753.712925][T31745] generic_file_splice_read+0x24f/0x330 [ 753.718527][T31745] ? splice_shrink_spd+0x60/0x60 [ 753.723478][T31745] splice_direct_to_actor+0x2aa/0x650 [ 753.728940][T31745] ? do_splice_direct+0x190/0x190 [ 753.734030][T31745] do_splice_direct+0x106/0x190 [ 753.738883][T31745] do_sendfile+0x675/0xc40 [ 753.743323][T31745] __x64_sys_sendfile64+0x102/0x140 [ 753.748572][T31745] do_syscall_64+0x44/0xd0 [ 753.753126][T31745] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 753.759188][T31745] RIP: 0033:0x7f6a12c1cfe9 [ 753.763644][T31745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 753.783545][T31745] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 753.792442][T31745] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 21:21:30 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x14200) [ 753.800505][T31745] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 753.808473][T31745] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 [ 753.816439][T31745] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 753.824758][T31745] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 [ 753.832749][T31745] 21:21:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1e00) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:30 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1a892) 21:21:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x2000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 11) 21:21:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x141ae) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x2200) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x1fdef) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 754.092052][T31759] loop5: detected capacity change from 0 to 262160 [ 754.144397][T31761] loop3: detected capacity change from 0 to 262160 [ 754.155331][T31759] FAULT_INJECTION: forcing a failure. [ 754.155331][T31759] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 754.159951][T31765] loop1: detected capacity change from 0 to 262160 [ 754.169414][T31759] CPU: 1 PID: 31759 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 754.169441][T31759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 754.169452][T31759] Call Trace: [ 754.169460][T31759] [ 754.201079][T31759] dump_stack_lvl+0xd6/0x122 [ 754.205754][T31759] dump_stack+0x11/0x1b [ 754.209939][T31759] should_fail+0x23c/0x250 [ 754.214349][T31759] __alloc_pages+0x102/0x330 [ 754.218964][T31759] alloc_pages+0x316/0x420 [ 754.223382][T31759] push_pipe+0x267/0x370 [ 754.227636][T31759] iov_iter_get_pages+0x617/0x810 [ 754.232778][T31759] __blockdev_direct_IO+0xaa4/0x2420 [ 754.238111][T31759] ? fat_block_truncate_page+0x30/0x30 [ 754.243569][T31759] ? debug_smp_processor_id+0x18/0x20 [ 754.248934][T31759] ? free_unref_page_list+0x1f3/0x230 [ 754.254404][T31759] ? fat_block_truncate_page+0x30/0x30 [ 754.259872][T31759] fat_direct_IO+0x111/0x1e0 [ 754.264457][T31759] generic_file_read_iter+0x231/0x320 [ 754.269823][T31759] ? iov_iter_pipe+0x100/0x150 [ 754.274580][T31759] generic_file_splice_read+0x24f/0x330 [ 754.280191][T31759] ? splice_shrink_spd+0x60/0x60 [ 754.285250][T31759] splice_direct_to_actor+0x2aa/0x650 [ 754.290674][T31759] ? do_splice_direct+0x190/0x190 [ 754.295915][T31759] do_splice_direct+0x106/0x190 [ 754.300827][T31759] do_sendfile+0x675/0xc40 [ 754.305256][T31759] __x64_sys_sendfile64+0x102/0x140 [ 754.310531][T31759] do_syscall_64+0x44/0xd0 [ 754.315021][T31759] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 754.321081][T31759] RIP: 0033:0x7f6a12c1cfe9 [ 754.325485][T31759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 754.345176][T31759] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 754.353668][T31759] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 [ 754.361707][T31759] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 754.369687][T31759] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 [ 754.377645][T31759] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 754.385699][T31759] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 21:21:30 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1a893) [ 754.393749][T31759] [ 754.410083][T31765] FAT-fs (loop1): Unrecognized mount option "" or missing value 21:21:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x2400) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x14400) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 12) [ 754.620649][T31777] loop5: detected capacity change from 0 to 262160 [ 754.654545][T31777] FAULT_INJECTION: forcing a failure. [ 754.654545][T31777] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 754.668209][T31777] CPU: 0 PID: 31777 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 754.676919][T31777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 754.687269][T31777] Call Trace: [ 754.690614][T31777] [ 754.693563][T31777] dump_stack_lvl+0xd6/0x122 [ 754.698180][T31777] dump_stack+0x11/0x1b [ 754.702543][T31777] should_fail+0x23c/0x250 [ 754.707335][T31777] __alloc_pages+0x102/0x330 [ 754.712006][T31777] alloc_pages+0x316/0x420 [ 754.716533][T31777] push_pipe+0x267/0x370 [ 754.721017][T31777] iov_iter_get_pages+0x617/0x810 [ 754.726156][T31777] __blockdev_direct_IO+0xaa4/0x2420 [ 754.731582][T31777] ? fat_block_truncate_page+0x30/0x30 [ 754.737232][T31777] ? debug_smp_processor_id+0x18/0x20 [ 754.743156][T31777] ? free_unref_page_list+0x1f3/0x230 [ 754.748924][T31777] ? fat_block_truncate_page+0x30/0x30 [ 754.754529][T31777] fat_direct_IO+0x111/0x1e0 [ 754.759174][T31777] generic_file_read_iter+0x231/0x320 [ 754.764672][T31777] ? iov_iter_pipe+0x100/0x150 [ 754.769464][T31777] generic_file_splice_read+0x24f/0x330 [ 754.775125][T31777] ? splice_shrink_spd+0x60/0x60 [ 754.780180][T31777] splice_direct_to_actor+0x2aa/0x650 [ 754.785581][T31777] ? do_splice_direct+0x190/0x190 [ 754.790657][T31777] do_splice_direct+0x106/0x190 [ 754.795579][T31777] do_sendfile+0x675/0xc40 [ 754.800837][T31777] __x64_sys_sendfile64+0x102/0x140 [ 754.806053][T31777] do_syscall_64+0x44/0xd0 [ 754.810486][T31777] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 754.816490][T31777] RIP: 0033:0x7f6a12c1cfe9 [ 754.821027][T31777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 754.841431][T31777] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 754.849867][T31777] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 [ 754.858590][T31777] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 21:21:31 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x14500) 21:21:31 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1a894) 21:21:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x2600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x2800) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:31 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1ae38) [ 754.866582][T31777] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 [ 754.874564][T31777] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 754.882615][T31777] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 [ 754.890600][T31777] 21:21:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x1ff0f) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x2a00) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 13) 21:21:31 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x14800) [ 755.027888][T31792] loop1: detected capacity change from 0 to 262160 [ 755.071646][T31796] FAULT_INJECTION: forcing a failure. [ 755.071646][T31796] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 755.084948][T31796] CPU: 1 PID: 31796 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 755.093371][T31796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.103516][T31796] Call Trace: [ 755.106857][T31796] [ 755.109796][T31796] dump_stack_lvl+0xd6/0x122 [ 755.114408][T31796] dump_stack+0x11/0x1b [ 755.118586][T31796] should_fail+0x23c/0x250 [ 755.123110][T31796] __alloc_pages+0x102/0x330 [ 755.127714][T31796] alloc_pages+0x316/0x420 [ 755.132155][T31796] push_pipe+0x267/0x370 [ 755.136411][T31796] iov_iter_zero+0x28c/0xba0 [ 755.141021][T31796] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 755.146328][T31796] ? iomap_iter+0x3b1/0x4a0 [ 755.150846][T31796] __iomap_dio_rw+0xb54/0x10b0 [ 755.155643][T31796] ? save_fpregs_to_fpstate+0xd1/0x140 [ 755.161132][T31796] iomap_dio_rw+0x38/0x80 [ 755.165485][T31796] ext4_file_read_iter+0x190/0x1f0 [ 755.170617][T31796] generic_file_splice_read+0x24f/0x330 [ 755.176286][T31796] ? splice_shrink_spd+0x60/0x60 [ 755.181243][T31796] splice_direct_to_actor+0x2aa/0x650 [ 755.186632][T31796] ? do_splice_direct+0x190/0x190 [ 755.191731][T31796] do_splice_direct+0x106/0x190 [ 755.196615][T31796] do_sendfile+0x675/0xc40 [ 755.201053][T31796] __x64_sys_sendfile64+0x102/0x140 [ 755.206287][T31796] do_syscall_64+0x44/0xd0 [ 755.210709][T31796] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 755.216620][T31796] RIP: 0033:0x7f6a12c1cfe9 21:21:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x1fff2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 755.221095][T31796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 755.240885][T31796] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 755.249392][T31796] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 [ 755.257373][T31796] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 755.265357][T31796] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 [ 755.273358][T31796] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 755.281390][T31796] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 [ 755.289403][T31796] 21:21:31 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1ae39) 21:21:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x14900) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x2c00) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 755.476676][T31809] loop3: detected capacity change from 0 to 262160 21:21:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x2e00) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 14) 21:21:31 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1b100) [ 755.637423][T31817] loop5: detected capacity change from 0 to 262160 [ 755.679361][T31817] FAULT_INJECTION: forcing a failure. [ 755.679361][T31817] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 755.692660][T31817] CPU: 0 PID: 31817 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 755.701158][T31817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.711228][T31817] Call Trace: [ 755.714591][T31817] [ 755.717537][T31817] dump_stack_lvl+0xd6/0x122 [ 755.722260][T31817] dump_stack+0x11/0x1b [ 755.726447][T31817] should_fail+0x23c/0x250 [ 755.730894][T31817] __alloc_pages+0x102/0x330 [ 755.735504][T31817] alloc_pages+0x316/0x420 [ 755.739940][T31817] push_pipe+0x267/0x370 [ 755.744205][T31817] iov_iter_get_pages+0x617/0x810 [ 755.749259][T31817] __blockdev_direct_IO+0xaa4/0x2420 [ 755.754572][T31817] ? fat_block_truncate_page+0x30/0x30 [ 755.760102][T31817] ? debug_smp_processor_id+0x18/0x20 [ 755.765493][T31817] ? free_unref_page_list+0x1f3/0x230 [ 755.770970][T31817] ? fat_block_truncate_page+0x30/0x30 [ 755.776499][T31817] fat_direct_IO+0x111/0x1e0 [ 755.781200][T31817] generic_file_read_iter+0x231/0x320 [ 755.786644][T31817] ? iov_iter_pipe+0x100/0x150 [ 755.791501][T31817] generic_file_splice_read+0x24f/0x330 [ 755.797181][T31817] ? splice_shrink_spd+0x60/0x60 [ 755.802140][T31817] splice_direct_to_actor+0x2aa/0x650 [ 755.807623][T31817] ? do_splice_direct+0x190/0x190 [ 755.812765][T31817] do_splice_direct+0x106/0x190 [ 755.818071][T31817] do_sendfile+0x675/0xc40 [ 755.822692][T31817] __x64_sys_sendfile64+0x102/0x140 [ 755.827990][T31817] do_syscall_64+0x44/0xd0 [ 755.832528][T31817] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 755.838484][T31817] RIP: 0033:0x7f6a12c1cfe9 [ 755.842994][T31817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 755.862626][T31817] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 755.871300][T31817] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 21:21:32 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1f1ff) 21:21:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x14d00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x3000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:32 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x14a00) [ 755.879351][T31817] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 755.887397][T31817] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 [ 755.895474][T31817] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 755.903633][T31817] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 [ 755.911619][T31817] 21:21:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x3200) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x2000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:32 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1ff01) 21:21:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 15) [ 756.124414][T31833] loop1: detected capacity change from 0 to 262160 21:21:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x3400) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 756.173748][ T4377] blk_print_req_error: 8 callbacks suppressed [ 756.173762][ T4377] I/O error, dev loop5, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 756.175429][T31837] loop5: detected capacity change from 0 to 262160 [ 756.182899][ T4377] I/O error, dev loop5, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 756.206145][ T4377] Buffer I/O error on dev loop5, logical block 32752, async page read [ 756.244557][T31837] FAULT_INJECTION: forcing a failure. [ 756.244557][T31837] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 756.258635][T31837] CPU: 1 PID: 31837 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 756.267241][T31837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.277458][T31837] Call Trace: [ 756.280829][T31837] [ 756.283763][T31837] dump_stack_lvl+0xd6/0x122 [ 756.288370][T31837] dump_stack+0x11/0x1b [ 756.292732][T31837] should_fail+0x23c/0x250 [ 756.297237][T31837] __alloc_pages+0x102/0x330 [ 756.301846][T31837] alloc_pages+0x316/0x420 [ 756.306284][T31837] push_pipe+0x267/0x370 [ 756.310558][T31837] iov_iter_get_pages+0x617/0x810 [ 756.315637][T31837] __blockdev_direct_IO+0xaa4/0x2420 [ 756.320979][T31837] ? fat_block_truncate_page+0x30/0x30 [ 756.326631][T31837] ? debug_smp_processor_id+0x18/0x20 [ 756.332161][T31837] ? free_unref_page_list+0x1f3/0x230 [ 756.337856][T31837] ? fat_block_truncate_page+0x30/0x30 [ 756.343340][T31837] fat_direct_IO+0x111/0x1e0 [ 756.347954][T31837] generic_file_read_iter+0x231/0x320 [ 756.353417][T31837] ? iov_iter_pipe+0x100/0x150 [ 756.358500][T31837] generic_file_splice_read+0x24f/0x330 [ 756.364070][T31837] ? splice_shrink_spd+0x60/0x60 [ 756.369090][T31837] splice_direct_to_actor+0x2aa/0x650 [ 756.374527][T31837] ? do_splice_direct+0x190/0x190 [ 756.379760][T31837] do_splice_direct+0x106/0x190 [ 756.384690][T31837] do_sendfile+0x675/0xc40 [ 756.389229][T31837] __x64_sys_sendfile64+0x102/0x140 [ 756.394478][T31837] do_syscall_64+0x44/0xd0 [ 756.398915][T31837] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 756.404822][T31837] RIP: 0033:0x7f6a12c1cfe9 [ 756.409249][T31837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 756.428999][T31837] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 756.437429][T31837] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 21:21:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x15600) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 756.445410][T31837] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 756.453387][T31837] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 [ 756.461518][T31837] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 756.469561][T31837] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 [ 756.477548][T31837] [ 756.538927][T31843] loop3: detected capacity change from 0 to 262160 21:21:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x3600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:33 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1ff0f) 21:21:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 16) [ 756.744100][T31851] FAULT_INJECTION: forcing a failure. [ 756.744100][T31851] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 756.757618][T31851] CPU: 1 PID: 31851 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 756.766128][T31851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.776221][T31851] Call Trace: [ 756.779511][T31851] [ 756.782456][T31851] dump_stack_lvl+0xd6/0x122 21:21:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x3000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 756.783852][ T1917] I/O error, dev loop5, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 756.787070][T31851] dump_stack+0x11/0x1b [ 756.801176][T31851] should_fail+0x23c/0x250 [ 756.805691][T31851] __alloc_pages+0x102/0x330 [ 756.810302][T31851] alloc_pages+0x316/0x420 [ 756.814740][T31851] push_pipe+0x267/0x370 [ 756.819004][T31851] iov_iter_zero+0x28c/0xba0 [ 756.823695][T31851] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 756.829000][T31851] ? iomap_iter+0x3b1/0x4a0 [ 756.833523][T31851] __iomap_dio_rw+0xb54/0x10b0 [ 756.839270][T31851] ? avc_has_perm+0x41/0x160 [ 756.843881][T31851] iomap_dio_rw+0x38/0x80 [ 756.848375][T31851] ext4_file_read_iter+0x190/0x1f0 [ 756.853584][T31851] generic_file_splice_read+0x24f/0x330 [ 756.859185][T31851] ? splice_shrink_spd+0x60/0x60 [ 756.864147][T31851] splice_direct_to_actor+0x2aa/0x650 [ 756.869565][T31851] ? do_splice_direct+0x190/0x190 [ 756.874618][T31851] do_splice_direct+0x106/0x190 [ 756.879493][T31851] do_sendfile+0x675/0xc40 [ 756.884013][T31851] __x64_sys_sendfile64+0x102/0x140 [ 756.889252][T31851] do_syscall_64+0x44/0xd0 [ 756.893756][T31851] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 756.899705][T31851] RIP: 0033:0x7f6a12c1cfe9 [ 756.904186][T31851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 756.923881][T31851] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 756.932574][T31851] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 21:21:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x15a00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:33 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x14e00) [ 756.940560][T31851] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 756.948546][T31851] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 [ 756.956594][T31851] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 756.964576][T31851] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 [ 756.972627][T31851] [ 757.016131][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 757.028189][T31857] loop1: detected capacity change from 0 to 262160 [ 757.033873][ T4377] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 757.037318][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 757.055169][ T1917] Buffer I/O error on dev loop1, logical block 32752, async page read 21:21:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x3800) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:33 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fff1) 21:21:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 17) 21:21:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x3a00) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 757.273388][T31866] loop5: detected capacity change from 0 to 262160 [ 757.332128][T31866] FAULT_INJECTION: forcing a failure. [ 757.332128][T31866] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 757.345503][T31866] CPU: 1 PID: 31866 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 757.353934][T31866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 757.364019][T31866] Call Trace: [ 757.367309][T31866] [ 757.370265][T31866] dump_stack_lvl+0xd6/0x122 [ 757.374972][T31866] dump_stack+0x11/0x1b [ 757.379173][T31866] should_fail+0x23c/0x250 [ 757.383685][T31866] __alloc_pages+0x102/0x330 [ 757.388364][T31866] alloc_pages+0x316/0x420 [ 757.392803][T31866] push_pipe+0x267/0x370 [ 757.397097][T31866] iov_iter_get_pages+0x617/0x810 [ 757.402360][T31866] __blockdev_direct_IO+0xaa4/0x2420 [ 757.407667][T31866] ? fat_block_truncate_page+0x30/0x30 [ 757.413198][T31866] ? debug_smp_processor_id+0x18/0x20 [ 757.418663][T31866] ? free_unref_page_list+0x1f3/0x230 [ 757.424122][T31866] ? fat_block_truncate_page+0x30/0x30 [ 757.429605][T31866] fat_direct_IO+0x111/0x1e0 [ 757.435112][T31866] generic_file_read_iter+0x231/0x320 [ 757.440639][T31866] ? iov_iter_pipe+0x100/0x150 [ 757.445484][T31866] generic_file_splice_read+0x24f/0x330 [ 757.451048][T31866] ? splice_shrink_spd+0x60/0x60 [ 757.456079][T31866] splice_direct_to_actor+0x2aa/0x650 [ 757.461480][T31866] ? do_splice_direct+0x190/0x190 [ 757.466521][T31866] do_splice_direct+0x106/0x190 [ 757.471399][T31866] do_sendfile+0x675/0xc40 [ 757.475970][T31866] __x64_sys_sendfile64+0x102/0x140 [ 757.481186][T31866] do_syscall_64+0x44/0xd0 [ 757.485852][T31866] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 757.491806][T31866] RIP: 0033:0x7f6a12c1cfe9 [ 757.496226][T31866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 757.515905][T31866] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 757.524336][T31866] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 [ 757.532369][T31866] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 757.540441][T31866] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 [ 757.548426][T31866] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 757.556410][T31866] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 [ 757.564426][T31866] 21:21:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x4000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 757.684952][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:21:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 18) 21:21:34 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000) [ 757.733899][ T1917] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 757.743546][ T1917] Buffer I/O error on dev loop1, logical block 32752, async page read [ 757.789172][T31874] FAULT_INJECTION: forcing a failure. [ 757.789172][T31874] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 757.802500][T31874] CPU: 0 PID: 31874 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 757.811023][T31874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 757.821091][T31874] Call Trace: [ 757.824375][T31874] [ 757.827314][T31874] dump_stack_lvl+0xd6/0x122 [ 757.831979][T31874] dump_stack+0x11/0x1b [ 757.836185][T31874] should_fail+0x23c/0x250 [ 757.840614][T31874] __alloc_pages+0x102/0x330 [ 757.845344][T31874] alloc_pages+0x316/0x420 [ 757.849777][T31874] push_pipe+0x267/0x370 [ 757.854053][T31874] iov_iter_zero+0x28c/0xba0 [ 757.858655][T31874] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 757.863872][T31874] ? iomap_iter+0x3b1/0x4a0 [ 757.868445][T31874] __iomap_dio_rw+0xb54/0x10b0 [ 757.873263][T31874] ? avc_has_perm+0x41/0x160 [ 757.877927][T31874] iomap_dio_rw+0x38/0x80 [ 757.882350][T31874] ext4_file_read_iter+0x190/0x1f0 [ 757.887479][T31874] generic_file_splice_read+0x24f/0x330 [ 757.893044][T31874] ? splice_shrink_spd+0x60/0x60 [ 757.897999][T31874] splice_direct_to_actor+0x2aa/0x650 [ 757.903390][T31874] ? do_splice_direct+0x190/0x190 [ 757.908511][T31874] do_splice_direct+0x106/0x190 [ 757.913380][T31874] do_sendfile+0x675/0xc40 [ 757.917814][T31874] __x64_sys_sendfile64+0x102/0x140 [ 757.923033][T31874] do_syscall_64+0x44/0xd0 [ 757.927482][T31874] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 757.933409][T31874] RIP: 0033:0x7f6a12c1cfe9 [ 757.937829][T31874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 757.957511][T31874] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 757.965972][T31874] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 [ 757.973953][T31874] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 757.981934][T31874] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 21:21:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x3c00) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x15b00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:34 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x15000) [ 757.989993][T31874] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 757.998046][T31874] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 [ 758.006287][T31874] [ 758.022202][ T4377] I/O error, dev loop5, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 758.071678][T31880] loop3: detected capacity change from 0 to 262160 21:21:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x15d00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x3e00) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 19) [ 758.264481][ T1917] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 758.296455][T31890] loop5: detected capacity change from 0 to 262160 [ 758.355291][T31890] FAULT_INJECTION: forcing a failure. [ 758.355291][T31890] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 758.368629][T31890] CPU: 0 PID: 31890 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 758.377067][T31890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 758.387190][T31890] Call Trace: [ 758.390474][T31890] [ 758.393437][T31890] dump_stack_lvl+0xd6/0x122 [ 758.398061][T31890] dump_stack+0x11/0x1b [ 758.402235][T31890] should_fail+0x23c/0x250 [ 758.406665][T31890] __alloc_pages+0x102/0x330 [ 758.411332][T31890] alloc_pages+0x316/0x420 [ 758.415770][T31890] push_pipe+0x267/0x370 [ 758.420176][T31890] iov_iter_get_pages+0x617/0x810 [ 758.425221][T31890] __blockdev_direct_IO+0xaa4/0x2420 [ 758.430530][T31890] ? fat_block_truncate_page+0x30/0x30 [ 758.436045][T31890] ? debug_smp_processor_id+0x18/0x20 [ 758.441506][T31890] ? free_unref_page_list+0x1f3/0x230 [ 758.446916][T31890] ? fat_block_truncate_page+0x30/0x30 [ 758.452421][T31890] fat_direct_IO+0x111/0x1e0 [ 758.457033][T31890] generic_file_read_iter+0x231/0x320 [ 758.462545][T31890] ? iov_iter_pipe+0x100/0x150 [ 758.467601][T31890] generic_file_splice_read+0x24f/0x330 [ 758.473162][T31890] ? splice_shrink_spd+0x60/0x60 [ 758.478124][T31890] splice_direct_to_actor+0x2aa/0x650 [ 758.483556][T31890] ? do_splice_direct+0x190/0x190 [ 758.488601][T31890] do_splice_direct+0x106/0x190 [ 758.493473][T31890] do_sendfile+0x675/0xc40 [ 758.497917][T31890] __x64_sys_sendfile64+0x102/0x140 21:21:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x15e00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 758.503152][T31890] do_syscall_64+0x44/0xd0 [ 758.507581][T31890] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 758.513499][T31890] RIP: 0033:0x7f6a12c1cfe9 [ 758.518095][T31890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 758.537712][T31890] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 758.546203][T31890] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 21:21:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x6000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) [ 758.549345][T31894] loop3: detected capacity change from 0 to 262160 [ 758.554232][T31890] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 758.554248][T31890] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 [ 758.554261][T31890] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 758.554273][T31890] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 [ 758.554351][T31890] 21:21:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10300) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 758.603077][T31896] loop1: detected capacity change from 0 to 262160 21:21:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10500) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10602) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:35 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x3000000) 21:21:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10603) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 20) [ 758.873165][T31908] loop5: detected capacity change from 0 to 262160 [ 758.899376][T31908] FAULT_INJECTION: forcing a failure. [ 758.899376][T31908] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 758.912736][T31908] CPU: 1 PID: 31908 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 758.921213][T31908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 758.931308][T31908] Call Trace: [ 758.934666][T31908] [ 758.937681][T31908] dump_stack_lvl+0xd6/0x122 [ 758.942318][T31908] dump_stack+0x11/0x1b [ 758.946490][T31908] should_fail+0x23c/0x250 [ 758.950963][T31908] __alloc_pages+0x102/0x330 [ 758.955561][T31908] alloc_pages+0x316/0x420 [ 758.959995][T31908] push_pipe+0x267/0x370 [ 758.964284][T31908] iov_iter_get_pages+0x617/0x810 [ 758.969331][T31908] __blockdev_direct_IO+0xaa4/0x2420 [ 758.974748][T31908] ? fat_block_truncate_page+0x30/0x30 [ 758.980250][T31908] ? debug_smp_processor_id+0x18/0x20 [ 758.985726][T31908] ? free_unref_page_list+0x1f3/0x230 [ 758.991121][T31908] ? fat_block_truncate_page+0x30/0x30 [ 758.996691][T31908] fat_direct_IO+0x111/0x1e0 [ 759.001299][T31908] generic_file_read_iter+0x231/0x320 [ 759.006725][T31908] ? iov_iter_pipe+0x100/0x150 [ 759.011507][T31908] generic_file_splice_read+0x24f/0x330 [ 759.017078][T31908] ? splice_shrink_spd+0x60/0x60 [ 759.022061][T31908] splice_direct_to_actor+0x2aa/0x650 [ 759.027476][T31908] ? do_splice_direct+0x190/0x190 [ 759.032526][T31908] do_splice_direct+0x106/0x190 [ 759.037440][T31908] do_sendfile+0x675/0xc40 [ 759.041879][T31908] __x64_sys_sendfile64+0x102/0x140 [ 759.047545][T31908] do_syscall_64+0x44/0xd0 [ 759.051975][T31908] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 759.057940][T31908] RIP: 0033:0x7f6a12c1cfe9 [ 759.062452][T31908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 759.082103][T31908] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 759.090559][T31908] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 [ 759.098539][T31908] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 759.106561][T31908] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 [ 759.114539][T31908] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 21:21:35 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x15200) 21:21:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10604) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 759.122602][T31908] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 [ 759.130591][T31908] 21:21:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10605) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 21) 21:21:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x16000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) [ 759.239817][T31918] FAULT_INJECTION: forcing a failure. [ 759.239817][T31918] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 759.253125][T31918] CPU: 0 PID: 31918 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 759.261562][T31918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.271641][T31918] Call Trace: [ 759.274930][T31918] [ 759.277951][T31918] dump_stack_lvl+0xd6/0x122 [ 759.282562][T31918] dump_stack+0x11/0x1b [ 759.286737][T31918] should_fail+0x23c/0x250 [ 759.291172][T31918] __alloc_pages+0x102/0x330 [ 759.295855][T31918] alloc_pages+0x316/0x420 [ 759.300333][T31918] push_pipe+0x267/0x370 [ 759.304618][T31918] iov_iter_zero+0x28c/0xba0 [ 759.309275][T31918] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 759.314527][T31918] ? iomap_iter+0x3b1/0x4a0 [ 759.319049][T31918] __iomap_dio_rw+0xb54/0x10b0 [ 759.323839][T31918] ? avc_has_perm+0x41/0x160 [ 759.328529][T31918] iomap_dio_rw+0x38/0x80 [ 759.332882][T31918] ext4_file_read_iter+0x190/0x1f0 [ 759.338015][T31918] generic_file_splice_read+0x24f/0x330 [ 759.343612][T31918] ? splice_shrink_spd+0x60/0x60 [ 759.348571][T31918] splice_direct_to_actor+0x2aa/0x650 [ 759.353970][T31918] ? do_splice_direct+0x190/0x190 [ 759.359091][T31918] do_splice_direct+0x106/0x190 [ 759.364030][T31918] do_sendfile+0x675/0xc40 [ 759.368465][T31918] __x64_sys_sendfile64+0x102/0x140 [ 759.373679][T31918] do_syscall_64+0x44/0xd0 [ 759.378136][T31918] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 759.384056][T31918] RIP: 0033:0x7f6a12c1cfe9 [ 759.388486][T31918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 759.408209][T31918] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 759.416853][T31918] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 [ 759.424866][T31918] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 759.432842][T31918] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 21:21:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x7000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10606) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 759.440831][T31918] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 759.448931][T31918] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 [ 759.456916][T31918] 21:21:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10607) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 759.500259][T31920] loop3: detected capacity change from 0 to 262160 21:21:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10608) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10609) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:36 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000) 21:21:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 22) [ 759.734908][T31933] loop5: detected capacity change from 0 to 262160 [ 759.756719][T31933] FAULT_INJECTION: forcing a failure. [ 759.756719][T31933] name failslab, interval 1, probability 0, space 0, times 0 [ 759.769494][T31933] CPU: 0 PID: 31933 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 759.777967][T31933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.788047][T31933] Call Trace: [ 759.791336][T31933] [ 759.794279][T31933] dump_stack_lvl+0xd6/0x122 [ 759.798955][T31933] dump_stack+0x11/0x1b [ 759.803201][T31933] should_fail+0x23c/0x250 [ 759.807641][T31933] ? mempool_alloc_slab+0x16/0x20 [ 759.812681][T31933] __should_failslab+0x81/0x90 [ 759.818250][T31933] should_failslab+0x5/0x20 [ 759.822795][T31933] kmem_cache_alloc+0x4f/0x320 [ 759.827693][T31933] mempool_alloc_slab+0x16/0x20 [ 759.832553][T31933] ? mempool_free+0x130/0x130 [ 759.837250][T31933] mempool_alloc+0x9d/0x310 [ 759.841851][T31933] bio_alloc_bioset+0xcc/0x560 [ 759.846636][T31933] dio_new_bio+0x389/0x4f0 [ 759.851147][T31933] dio_send_cur_page+0x273/0x700 [ 759.856133][T31933] __blockdev_direct_IO+0x1a4d/0x2420 [ 759.861580][T31933] ? fat_block_truncate_page+0x30/0x30 [ 759.867095][T31933] fat_direct_IO+0x111/0x1e0 [ 759.871706][T31933] generic_file_read_iter+0x231/0x320 [ 759.877186][T31933] ? iov_iter_pipe+0x100/0x150 [ 759.881970][T31933] generic_file_splice_read+0x24f/0x330 [ 759.888454][T31933] ? splice_shrink_spd+0x60/0x60 [ 759.893486][T31933] splice_direct_to_actor+0x2aa/0x650 [ 759.898885][T31933] ? do_splice_direct+0x190/0x190 [ 759.903927][T31933] do_splice_direct+0x106/0x190 [ 759.908877][T31933] do_sendfile+0x675/0xc40 [ 759.913394][T31933] __x64_sys_sendfile64+0x102/0x140 [ 759.918706][T31933] do_syscall_64+0x44/0xd0 [ 759.923192][T31933] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 759.929133][T31933] RIP: 0033:0x7f6a12c1cfe9 [ 759.933658][T31933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 759.953290][T31933] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 759.961816][T31933] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 [ 759.969802][T31933] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 759.977834][T31933] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 21:21:36 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x15400) 21:21:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1060a) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 759.985810][T31933] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 759.993948][T31933] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 [ 760.001934][T31933] 21:21:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x16100) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1060b) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 23) [ 760.189779][T31947] FAULT_INJECTION: forcing a failure. [ 760.189779][T31947] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 760.203126][T31947] CPU: 0 PID: 31947 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 760.211593][T31947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 760.221657][T31947] Call Trace: [ 760.224952][T31947] [ 760.227899][T31947] dump_stack_lvl+0xd6/0x122 [ 760.232550][T31947] dump_stack+0x11/0x1b [ 760.236729][T31947] should_fail+0x23c/0x250 [ 760.241159][T31947] __alloc_pages+0x102/0x330 [ 760.245841][T31947] alloc_pages+0x316/0x420 [ 760.250312][T31947] folio_alloc+0x1a/0x20 [ 760.254658][T31947] filemap_alloc_folio+0x53/0xf0 [ 760.259623][T31947] __filemap_get_folio+0x443/0x690 [ 760.264796][T31947] pagecache_get_page+0x26/0xe0 [ 760.269687][T31947] grab_cache_page_write_begin+0x3f/0x50 [ 760.275338][T31947] ext4_da_write_begin+0x292/0x4b0 [ 760.280596][T31947] generic_perform_write+0x1c8/0x400 [ 760.285965][T31947] ext4_buffered_write_iter+0x19d/0x290 [ 760.291670][T31947] ext4_file_write_iter+0x227/0xda0 [ 760.296883][T31947] ? __iomap_dio_rw+0xf74/0x10b0 [ 760.301852][T31947] do_iter_readv_writev+0x2de/0x380 [ 760.307074][T31947] do_iter_write+0x192/0x5c0 [ 760.311698][T31947] ? splice_from_pipe_next+0x34f/0x3b0 [ 760.317220][T31947] ? kmalloc_array+0x2d/0x40 [ 760.321831][T31947] vfs_iter_write+0x4c/0x70 [ 760.326409][T31947] iter_file_splice_write+0x43a/0x790 [ 760.331848][T31947] ? splice_from_pipe+0xd0/0xd0 [ 760.336933][T31947] direct_splice_actor+0x80/0xa0 [ 760.341978][T31947] splice_direct_to_actor+0x345/0x650 [ 760.347381][T31947] ? do_splice_direct+0x190/0x190 [ 760.352444][T31947] do_splice_direct+0x106/0x190 [ 760.357320][T31947] do_sendfile+0x675/0xc40 [ 760.361799][T31947] __x64_sys_sendfile64+0x102/0x140 [ 760.367017][T31947] do_syscall_64+0x44/0xd0 [ 760.371452][T31947] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 760.377371][T31947] RIP: 0033:0x7f6a12c1cfe9 [ 760.381807][T31947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 760.401478][T31947] RSP: 002b:00007f6a11d93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 760.409917][T31947] RAX: ffffffffffffffda RBX: 00007f6a12d2ff60 RCX: 00007f6a12c1cfe9 [ 760.418030][T31947] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 760.426010][T31947] RBP: 00007f6a11d931d0 R08: 0000000000000000 R09: 0000000000000000 21:21:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x8000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1060c) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x3d}, {0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x280800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '}!-^'}}, {}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) sendfile(r2, r3, 0x0, 0x16400) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', r3) 21:21:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 24) [ 760.434013][T31947] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 760.441999][T31947] R13: 00007fffd76bfacf R14: 00007f6a11d93300 R15: 0000000000022000 [ 760.449999][T31947] [ 760.478189][T31951] loop3: detected capacity change from 0 to 262160 21:21:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1060d) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 760.497192][T31953] loop1: detected capacity change from 0 to 262160 21:21:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1060e) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) [ 760.598413][T31959] FAULT_INJECTION: forcing a failure. [ 760.598413][T31959] name failslab, interval 1, probability 0, space 0, times 0 [ 760.611088][T31959] CPU: 1 PID: 31959 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 760.619570][T31959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 760.629643][T31959] Call Trace: [ 760.632923][T31959] [ 760.635855][T31959] dump_stack_lvl+0xd6/0x122 [ 760.640516][T31959] dump_stack+0x11/0x1b [ 760.644776][T31959] should_fail+0x23c/0x250 [ 760.649253][T31959] ? __es_insert_extent+0x43d/0xac0 [ 760.654467][T31959] __should_failslab+0x81/0x90 [ 760.659337][T31959] should_failslab+0x5/0x20 [ 760.663934][T31959] kmem_cache_alloc+0x4f/0x320 [ 760.668722][T31959] __es_insert_extent+0x43d/0xac0 [ 760.673755][T31959] ext4_es_insert_delayed_block+0xfb/0x320 [ 760.679574][T31959] ext4_da_get_block_prep+0x4c2/0x850 [ 760.685087][T31959] __block_write_begin_int+0x47c/0xf90 [ 760.690578][T31959] ? ext4_da_release_space+0x1a0/0x1a0 [ 760.696056][T31959] ? PageHeadHuge+0x3b/0x70 [ 760.700609][T31959] ? ext4_da_release_space+0x1a0/0x1a0 [ 760.706084][T31959] __block_write_begin+0x51/0x70 [ 760.711102][T31959] ext4_da_write_begin+0x2be/0x4b0 [ 760.716221][T31959] generic_perform_write+0x1c8/0x400 [ 760.721544][T31959] ext4_buffered_write_iter+0x19d/0x290 [ 760.727120][T31959] ext4_file_write_iter+0x227/0xda0 [ 760.732380][T31959] ? __iomap_dio_rw+0xf74/0x10b0 [ 760.737330][T31959] do_iter_readv_writev+0x2de/0x380 [ 760.742613][T31959] do_iter_write+0x192/0x5c0 [ 760.747217][T31959] ? splice_from_pipe_next+0x34f/0x3b0 [ 760.752791][T31959] ? kmalloc_array+0x2d/0x40 [ 760.757391][T31959] vfs_iter_write+0x4c/0x70 [ 760.761939][T31959] iter_file_splice_write+0x43a/0x790 [ 760.767329][T31959] ? splice_from_pipe+0xd0/0xd0 [ 760.772193][T31959] direct_splice_actor+0x80/0xa0 [ 760.777146][T31959] splice_direct_to_actor+0x345/0x650 [ 760.782533][T31959] ? do_splice_direct+0x190/0x190 [ 760.787574][T31959] do_splice_direct+0x106/0x190 [ 760.792452][T31959] do_sendfile+0x675/0xc40 [ 760.796912][T31959] __x64_sys_sendfile64+0x102/0x140 [ 760.802242][T31959] do_syscall_64+0x44/0xd0 [ 760.806675][T31959] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 760.812578][T31959] RIP: 0033:0x7f6a12c1cfe9 [ 760.817090][T31959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 760.836701][T31959] RSP: 002b:00007f6a11d72168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 760.845123][T31959] RAX: ffffffffffffffda RBX: 00007f6a12d30030 RCX: 00007f6a12c1cfe9 [ 760.853113][T31959] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 760.861209][T31959] RBP: 00007f6a11d721d0 R08: 0000000000000000 R09: 0000000000000000 [ 760.869186][T31959] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 760.877167][T31959] R13: 00007fffd76bfacf R14: 00007f6a11d72300 R15: 0000000000022000 [ 760.885264][T31959] [ 760.893159][T31955] loop5: detected capacity change from 0 to 262160 21:21:37 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000) 21:21:37 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x15600) 21:21:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1060f) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10610) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10611) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10622) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) sendfile(r0, r1, 0x0, 0x9000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x111000, 0xf0) 21:21:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10641) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipip', 0x0, 0xf0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, r1) 21:21:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) (fail_nth: 25) 21:21:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001001}], 0x400, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000440)='./file0\x00', 0x40, 0x80000001) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xff