4ade902ca902680dd4ae7b196f12574636fbbe6ef7af669345822422f0aa48316506773da33701c7b18926789a86a8fdea3abfd19d501712d75128737917af8dd14b1e3ec971ba4f1d1cb684eb6ed9e47f0814af29888e103efab9d74ebe5e38883d6065cdcd593e9a4892df73d35b477979e03f382a693a647da455a0c94691bf6faf5f9f6f7738bb147f7221070530d08228c2c93d0c6c3f4be9e4c688633fd00f8e4a21cf5709fa88efecaf2d49b976b6d1881614ea00151f636b760b6f3f8fef11dd9a50d74b015f0b1b53baae280bfc0fcbc9de7a9704f66adc117a1cfe5b4d9b4cf40cefd8f7ee9d0ca32949cd12d9bc7e8cf933582bb049f7970ac43e2a8e75c159803d94eb21073a019ff7eb83853ed2b0a9efeb9d808cee1453b5234342b5247328bb79d9b0397365c1cde90fe75803b3aafce81342767c5e446ce01e806efa7c0d7cecd99c50ca4168e64f2bd7bb086723b9453015feb72bab5f277d4af60d966b09ab4f9b7c1df139f779bad1bd456f914944a518d216bbf6e2c7c1b81626abdb9c1d1c04843780b831db297dbf853017e98275f8840d5f6c21f1bd9fcb5e699655d5fc97601aeb0e7bf3e0d3e0f422b7c7920646dad803237389ca2c233c92ef4f20402f509f113bc904afcb0ecfd4352b14efcc44e3ebe85560d3b1afd82429fcec3b562e6792b95116ef5a1e9fa312233e608ade7ba002fbec6dca259d1baf65a2e0f83f37079960e692bb9709cc7605f1574289ed81e17a1621eb3e3d5a7a2dc06ac4d9bdd9dd9661445038fa92b36493328bcc1bf039fe0d5a3a5f5ba683c0124f735bf98cc532670d8f5b60bd9c795c77fe450828ca70302dbc04650bcf308df4ab2e6eca83f196233bb8edbcfcff4e2d74be6cc8396b5c80320f607c7158fbcecc916c9d64f3cc02818ab476c2ed746e4478fe4e3046022748bb88f7ea67069f2b7c6f7c3951a1fad24ef5e6f7a793d0b56eaed84a4604304138aec27cf562db98264eac5e6bec02ab6b5b66fb2ab49ee484f06957cd88735f2bae3e4c6de6286f3e65ebf11825e3fb73781530953b38243bf4f0f6f921267ea5406efb1c1ec74f768ea8e9bc72a23e523cb105b07bc24463b54276d8efd6a4993259a3c20751635ddca8300a851330b6071cd51232b7d4a0eb37f5dcf1aee09c2d07828b5b81cf976f45390610e616b9ec54d9dbebc3996bf30450045df68250b4e0fb30657e7e3847a720b5f4b66c8eb40efabbce0e809943c180a635d8d8602c167776d8fe66e8232e95237a43d836c20b78596c3d4448f0b00944114d707c06c2f3aec710be0fb967357f72dae35023abb12f971c9ee3a81adc61ceecf0e0e561efa3f72f4cd260e7d0c401d5ed87a83f0cc19a7aaeaee2448e252da518d11736031946b8231b05a99b33f60632e55bc627cee3dfad7c9ed20de3d6c5af5add0f6b0691d3983f27036be9d9f50673c8f7368e2265a12879b11b73869ec67ae52b0126f0aa12e475f10c7a88bbe5736d6784b7b1d3954649c5fd90dd36c208db3118c14d89e53c33a5890ccc4ccd7f40402bc0ebe5604b3871402674db0cb3d49bba7cbce402d0728c643796188e8b1d2be6ec88a7086cba292137d7dff4aae92f3bbb2692e73d722157e1eb8511d3f2e07a0ba864ca82d85c2ca37db5a333dc45cc8ba8e0993ed5b5e37152a1a8d13aa23b5026c556c73783d766ac2ede485bf3db3f24424a0dae2b0c72840aa5de9de2603ed06bedb89b9a522d4533e44e041998078f660b1b4b46385b28af2fcd48da2478878b31216a35f09e5b3ec1badd452e2e6e0e5b1cf9d824aedda814a440d4b7ffd646424618714a6f1a1b2db43544ed9869bb8befd5d71d0875320a22e1e156b5c4d52f034dccbe95eee7e694b2b9d56be02012fb323add2374d9aa3b1d0bc654fa72c4da2c2a9eab334bf10dee3c5c49873b5ceef3222db2c9b22e4865d94b353e0047b813e965540e3ab1c1e4c0eded3deb05e514ea33a74a0795fcc6be426e72fa33d37568fd498fcb223fdb746cd58c78fb3ac712633c8a936e8f88b521b84e414b8c4226b94067d4f25db135d3a1cea4fe9d6e5739cc1c19bd935656aeaa4da4dc8dce2ed2414b5d6bd2f41558393d375311e631bdcd711d6aa75a7c720444d4affbcc558b49a8992b368f3b88eb89469aea889fb562783e8fe5658e75c54b0df20437d539f39bcd89f9063077ae2e2219a22ee8364c4508a2d6f441058713186a6e3464fd4aad8e032159e5fa9c6ee8f134ade800b59b20cc425bda88b84a8d9db0ce3f1eb4e82333874b8912582792b2ebde981378a03abeb90424ca7faf2964d5a00f95b4508f2d137466003cdf51e4bdaa2064ed0ff4ae1f2969779fc0d2324eaa127b11dd0d10702ddf808ff758376678ff75ca965c4b6380063558bbedc334ac0738d7179647422b4231de9c5112be19a75e5059f5600f8898215b48d710b8c7908e11ab11c3a6c39211d43c35e24eae260fbdc75d315db26e20009d08b92c6e13d43b82145146ec26081be5dd1285b1afc7ddeb506a65d9cb8bafb0df0dd16e600561905786ebd841cd9908951aa02f4448befe40ac26dc666f481a1cdbb53d81167b802a56a6ef8c4895ee1e33b5b56cbf26f9dd5b4bfb7d5d82289f095b6a9d865bf45ddaa9888909f6c7a6aa9788f2edfb5dfdc8745c0288e89f6ad9cb5d29082e93ceeff3fdf1bd333a3a1939adbd170be65ab10ff4ca1cc5110e55328968b552d4f68861d8fed458c0d2ce64898835f0ea88492e7cf4337a02bb33639017aaa815876a399fdc50bd9317dcb656d9b9018a45dfad1c777770dee40a25a77efb6c8b0bb645cf76855f474dbc25a3fa37d819400d8a65050084cf6f0858b7ac709f89e99c0cd21e44ad789942803ed14f5ecff1a4d9fc0ede575d316a54ab6af02eb1ddae1c9bac6c5a53ae7d7c29a82c217a4eebdc4186eb1b3ee423e9cf0286941b6912a03b34a0ac806e2dc2e7fa4e8799ead2b12362918d699e1a000b40b668bf2513ea878468e6c9c28a92fa1f00ff9983424037fe4f5404b9aae26cc2e688c9e6f7cea5d4b1b60bb90c07b493754d3636a4e3350379d04ca4a94d9dab08c59aea7c0bf4ee678bad0343021b8a1e5173a139e43c60b71ee65e839ca3a73c1e131d1094b78e4d5b0db5a711fba48f4ae2d4406f5e695cffe6f8ed7cc5ec8e0a90b85954141db356c1c3a1b4450c6c0b603a2ae0ae471546327a9c66371f0b15e529b13b69e595f8dc06d681572c7706fcd44d1c130877009a3bceee8776a967f51634cf1c2eec7aa86fef83fc09bb4a2412ec36b4bd08b4316467440cb7b9d7323ef4ae6f525b28502133d210dfbf4df14cc7c50f5c353eb5399a9bd5bb35d19beb30bfd72c7d776b7b23cbb0d21da1b9298becb5123319c6d694f9f200819157206e1a82059758ea1e5ada26b580e4c9750dd335141dcbd3e76e4989ca0ff5788ddd94707e9968ef7f5a5eba5cd101a2f536778852718f2ab65eada0a2e513ae4e4ac16d46577ec590f50c8e91a3991bdc916d973f77ecc5e680043b03d32319d1c73e601c9d973a00319b3addf7746542c74d1f31e2c56517f62a1dfb5e4102e99b02de82a0d61900de25ee6d0ff69e2e582e309d6097b3106a679801d48d8e660eecf963c50b1876f224c8417834add4c45046939ecb5fb3959701f7764655db57bcac3a1c5002ed8a0a3f4490d21840c85ab36fd72a985979ea7f807e"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x566cce0dfe7c57a5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x35b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x1c8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}]}, @NFTA_DATA_VALUE={0x4a, 0x1, "42a2915fe14ebc3c86bc8fc8a81911b53c4cd2e23bcdd86396a186349d9c82cd2a8b2213aec310bc7ef86d4c5a21650c274cb761ced56d565663ac0305f3b810564b09ec0628"}, @NFTA_DATA_VALUE={0x92, 0x1, "0067dba36d03d6807fbb0504c2814eca9e53c2294b5a76fcca7c313f4867b3316edad016f6877a1e84ab6ca25b54a3e9a6e64250178d101bf60fe05bb9312c4a9759cdd8f1eb26e16b9dfbe3a2d69fec2f8860755bf6543ad4f06b03fc9672f770e017089cfa3be815a025a43c1576d6d39c7f117aa9ed941009162d757a777e2ad43038bc117dbbb2a396d02f0a"}, @NFTA_DATA_VALUE={0x5e, 0x1, "4e32f99f050b11885715857a934999174e59e3e28de5e04b5e14c96a141c77fea7a6ca963752267bdb43dc699642082b184444879558d60ead16e6462756bab49a4ffb202dfc3b1ebb1466162aa92b1470c4a7ffa51b5b4f346a"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x2dc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfc, 0x1, "a555f8adcea0e01bc39bd672d2eb8315e12d71a5cf68666c1adccbaf83c84b3be4e0475674f98590dfe02e5ac44e38400139284a3500f2d98c7639c8a4062e0e95032ea3dbda272fcb715a5f9887e531c941af8579aeeaed6e90ad0aa52c7f6b2d583dd7cdb050224d4ff90bd13a8b90e501d83cb83db7d24364a44f597c4a123b9cb6ad80a92d519381bd254661eaa7bff8d6edb60cfc4dca146a604f50508614d539492987de49e5e9fce078f0aa6bfb675255c847e7699b8e81235b561ae6ecafafbcf8b9174dd6898c77a02fdd45b9aadc5da446b710904101f70dbbe9a4233f264f1176dd2981fb03e76f37992a92997090cec6df88"}, @NFTA_DATA_VALUE={0x27, 0x1, "d491408df5e6302a2bcd38ec2c916cbb5b54a76865b52bc70d2d76e501e3991fa3e4e4"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x43, 0x1, "2d0db74fbc77e0386313ff7c2bd912356eec438e589ea5417155200203b675ae52e0cd52d49455d2fd21333c9b613c399891fedc9bb9a61cd2fcbc606dfc82"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x102, 0x1, "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"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0x30e4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x42, 0x1, "508306fe5492aedcefc1ca2c6f98c42698cc82fb9156c0c77b388e86bbb4887472647a1775433b9d191ccbeaf88c433ce52b31f05a309f834881f833e152"}, @NFTA_DATA_VALUE={0x1004, 0x1, "207e96bc5581ef3fafd3eb930937bc6e4199a31f7a0f5e157c4f8a1266b7aa887c3a17edc4d997d2d3c85bd3b62be1589bad2a649aba25e02cf4654fba96ed87fcf315b6d594dd79c82c2c7858c6eec18cd25e33d525ab878b23b530d3e9fb444362f2e6eaaa56b395cad56978db7949fe94aadef69376f60aa681a3501d14e82ecb7e728754a05ca2c1e1eac6d2a3edffc7c1a82b3b6899a7ad558f47b9693940ed26934b68f6383a80154c2d23d37e152baa91dcafb447a0fec70e177c45593811e538590b8bd7420a8c1ab59db4aef815735fc6361995be0c4e28368d252920a7266b3bcc7828c13eae7d779cf50922724df1dee116c31a700c9d2506bf4a41dda8aecfabafd359c057c97127783edde3f7ac6d21bc28d945c052367e8c42c6138f50b9cda1cbf1110409feac5ca3a360a465ecf2ad4364e72379951fdb53c5f403af8a72b457bfcf6bb91c6d7c89f239411123a4572fc9cac83a9244e13553347298d8573e861e7ca14090e217f7cabaff5efbb49922a9f5f5b46cc52136ef7d5514f9537b44d83964900657e53b4835fbfaffe7e6a11cf74cbc9c9220de7d608fd209bb0228f8a5c5f7b988dbb99ffe87f29bcdf1165cea4ae5fd48c55bc355dc385d0375073bc0c8d5cc3391f097487968da6d409abc05d509585b9d521fcb8e8e1500b8a95c38eb13f03c0796a1980642a7b78d449c2a5460dede486954ffc769a3e9ffc84ffe30e3284a084b7bbbaa2a8eaeb07af018fea74c7726cdd08cc0e76d374e2bc19e6c591fb97a1d9986da0b8847545d7f7986766d78c3d2e6defebe81b7dda5d0a72408a4c710358365774c3183a696aa237ec2f0ffcd9d0789f6969212e40603b55ed2724eb223cff654eca8366cbad5a88e08f73a6a9432e1a8c43892866cea05c9abe04d1dbde31ae1efce1f34a7393d881f27f4dfe12e5eebd08fdd60aece486fa4838a53adb1db9364f7b5428d4cadd699e1b4cc1e1c92e5719cf28187e03153c2c07691c4ef6d33d3ccd4f97fadbc6418f3e01cc0bc15ba01bd7acae25b9def9cdcfc489c1ae174bac97d995f57b1c733cc5a764883c72c51aa9defc7c5b2768183b15d5e95fe90a3185831a0c6160d48606ea4405d61f403351985f2847c33b34501251ee244ec861d87cd0c370fc6a3e744e29bc4c0f115d70170169b2ef7fd136282e64434cfdd9f987bf715dd444a0e631151132b1346f8e057005701ecefe9693dab81ff3563b84e3bbe4cc4089551fe9079365e470dba4a015dcbd9b18cb454de0df4d64794b6e6d6eb540d7e5fcbbba0e3b1e7c96c628376f377a5f7a48ca47dd21b706f0f75e60d2a79968301e965c0a6e223746bbb353b610aedee667bf9ab96d91cf1e02636152b7dd5e6bf88e2ac814245822c274718d1b8124d6b70d81c64f5b710b9e8a31ce6daa75a8c2ffddac6fca9b37e75cca692051ca980bba71416460ab9c71f9cb34bb2109773c9490c20b37137eda68d606c608fecda7bf25e3b88d6c9ce7176b442f85a868c0fe25345e970d30186d63029442323b7e0efda8434cb0298cd65460d40f08ed5dc5bccd6e50c9d73c69f60caf646c06d9417af8d0dbd56a2f5a85a471955a9396710360e3741e7a39b067afd5cb91e274ecb1c2aff1169d0550fa881d751501f057827c4ecf295c94c948ca69378162226dcf124492933faf0081a2117f567e7a45a41855b1107022259ed10dfd768f5509b898f9d36101da228f0110a98f6e6a1e58ddd7881e02973aca2ff304780c60da59f909b2334514b5bef520f4131755f4fba4bc2e1879f964852ea2f494cde1782ab8ca2900eaa33b85af240dcb58a3487c630a82c7c56baa123947d05d357ea5b0dfc8ee64503c2a00d0e29c5a7dfba97b21a5142d886493b590fe0e7f66388577f6e265d2a9d7f203587db0c56f01256375e4b601dad36bd2d0bbfb772128639ba62d576b0b6ccf73f27e1038e21db38570cee02c18cbc7b9bdfc44d09ef3a8d2e185324c8052a6913b10d235c066c3167e1eaf12641d1c52544afce4f6382875f6bf8bccf3461c88ca283d8c22486382e04505d6f2bdb4709712304e55151e205c3849175bf505d173ad5e86cbaf4e114bfede444ca67a386bbebbb25ab3b7ff381b4bf1697104998f70daea64c82ad895177649096d5c24e67f706e5bd19dc21d5bb32f0fc86a372cb81b24b3543d7298daf16fbcae06e1a64e02e423083e01e9f4d990ca28ccfcca16963c55b3996dc504110126c4bda71c620773017b8d7fca8d261fcc129652233b73a732560631e7b17dadba06925b33ba4848c1197266c7e6905283c49ea09df1c572b3b5b93596dd30c6457442c64a0b6cddd0a133a74e0e3b7d1320270bd93394ad918d28ed2178926254fdb5a9258d530db3df546b59badec89f4a617d266343ea32bbf4f5e4478963096d4c29382e94445573b35c63cc2a6ff64d4368f22c7cd3d4c6187f03d056b3411c6cb5b74f3f30fbb85110b14d157b599da10255d0d3bdb2b236244e0744988622b9cef2b7023d1cd2873d1d27aaa5f809fefe4665d5fee8a175b627de7c234125673b452a2eaa89bd1cc67c6c3bf339ef2d07f24fdd614e31611bd96202dc37f4f2fcffce8ea2ad201d926777376625dc73a2c800751ec90677222bf8a590193097c50517d03188aa80cefc00c25850f59c318f317590fc1995e5715aae55ce2de6d7e86e5efaf15976990e853191026f7513b8d665ead98a1c655c523bb3e1a6d5b809d7b30ae617051fcf975b4c3a47011e26e642b20ed932da501fbca9ac0b1d423921ea6502a6479b133bb284dfc8e13ea7485776621909341b43e8333bcdf7015536fd0bd78d98fa04361cd705f7ad97d689850f97bedecf2f505f798865fff54d52b5c9f5db382ce3d9c447eea2ab73f7304324858065678212fead63bc7a861076a42b03f6c1d1ee60e5d8285706ead893a0fa49c7ce68c55ab088a9b42788c6ae0238150630a93725536c4d3c9e826dcab8e36ac808a2b9edc040c372016a12487ed0f066d8948def17b5687377c47d103c8395c62d1999fd707ef657d7327f8215a8a92a1b7fda4aeb788e8b2aa0ee8eaab4be9ac73b9d2f966855b0169175b049776656f9d6f27261f7c6880908f37d8ef550fc48ecd13d351542dca234c86f3f13db81400ab0e072307e3abbab440e94ae2acbebee78440207f9129f2b4a0426382795c0474246c0fb5352d9d034f9e48e98f06aca72a6a871c4cba0d315299738defc2a288a0e28fec3e9e31668813ce885eac11c746d3ccdb52acbd3a28b74a89848dcc923ac82f4faa7157cb28d5a88f12c65d5b2352436e4850cbe3a17d4aca2aae87fa5dac60a164ab67d59aa6bb4ea5b2a7ea07bcde99f070b81396007d5c5e20515da6493c84ac27047dfe8375772761cf062fa1268eadfbebcfe9bbab640b28ca975d5f0aa6e236fd9725cf363ea1a35f4e1dd17136d81881a6f6d3147e4cc3d3eb2d485bc44d952eea1facf127ddd8925df98127b386e4d0e10c3bf17afe1bb44fd9395860adf0e21664e002b2d6176b1556f46306e55029419930996079154ea73a9e504676e364801afff0fb2340b2c997e0aa2a2391ad3b7f7f4caa59e003a51dde2d2c8c5d9c7b967dba61211c67a4836a7c509d13c2c4852e64f9edd85e45826f20c969669632bfa01e6b1918cf81d0befbec2f1a87aa3af8922068a267a0bcf0c3a3e821cd347bf177c6b717a17d005544e70064ff3d00f74519012780e4874c3ac8c4a7af2c18c948d562b598738c911f784c54880ce74134b4e3447fb5158c23abfe1ba9750af95f48e0f1b41f4365e9a5e85bc26777485186a1ab37d2a354964500c03f5e528509c1fed6ef71c8315592e4633753710cbcf7946720714e75d8afea032ba2e4d5744ddccfb45426e129bede2018db38bf6b95548e140fc40d7c4cb98f5e122b457b830cedce21a0a123ab48e0fbc085b175566bc1afd9f0b75c13aab321e5146ed55b6fe8ad17796f325af6afaa236e87ba737521c876aca7715ffb58c703aecf1110b7acbfe385a2eeb2f35c1b3775222297c81e8cf4ede0743119cd1ed74983e12127154a910b440d0f5df5531fcdef7f66885a9f415f9041838532cb8750cf7fa4c613efc7b754278d7482e1d8e46253cd632f47d33bbce0caeaa31fb0e18fd0477b409fa30859fa6cfbcafe4af354c38af668ec12cba3074e514f305c0d3297f63948963e8e82ed86b6b8d4d65ed0e168e1503495ba05b601b9e8e035d6e683e359636d4f12740385aad5d2155d90398076a66712b331870cf4dbb73daa6efd0c39b4dc32e1364454653a3654e540c3c746dfd8fc69fb65704176ca1a6c76d8532efd1fa95b186ae3f77b942d2005e8d37723378750d2cfe04bd8c60f03713a918ae0371e6a10ae56b02599613347308a250653fa81d6e9659557dc3537651e46d87ae823d4980a97c3c6089d56952d3b022abb676f38709a6cfa71e99d8750a083f0ff23abdbe0df9648f650b6b5c86c7c24597136d81d91f40bb4a17802cd6de532b0189236a810e4714e5aa973b038e9e2e15c94ccfce38ec9ff7a3c6a1a7ba197e6ed67108b08b3508c3154534c981eb92d1d8bc84ab12e65e4eca0a7a5441d7ac3c126d97d035641f4c8760b9b6628d91983dc362001a1544bdc0ebdd81a712bc6aa779dd76f67b7432f86fcf59fb870868086787b4415a49988daef02c29e3551a12ebe8d49d478c93b26296e6dba4e6f6d1e34c854e6231d79029553c5a32b775d687a91ae0163b4fece6f068e209ef0fb2ce75c68e60e37c5a6aeca3d78f427f39ba4813145901761e6acbb89088853d8db31abb54be4ac1c0c2cf19c23b04134d6a293664a171de07157fbc6c24c67abcb1d3bdb375d4ba420c8c580183c07de14258a10ed0f4329c49a9a958b72269df80668c1dd034997de8b95d74e3374eca1a1db5ad9e1e8cc69bbd1a3d540d9457da993113b7ed8dd01d3f712ac0d81e571b356bf33103dc94ef3750973654eff7d07a467a776f2d658465316a7c77c22ddd7a21ccca09e3e31d247cf835e3d914e7feb28bf981350621df22ee84eaf140274fe32fde97bf759bb58e313d2cb0ba6e5c04732b5ada021a90cc8d0289e81e221b9732ab8397b093b15c96b0a3d2b8fef868589b8a15f6dcc7b3f42fdd0d231713cc2a21c631d056a76111c50f190ee0015c2a80faa84d8bfffe9862731aff14514a330e011cc22f4ff68c05a379207a682de3f10262151abe985a6f96bd2bb7973eb00d0be7fec5152eb866c3688b5fe8b2068ca447a8fe2e172107396fb36039e2b88e5a19f2d0bc69701099be424113c48544bcb8554ba5c5594d56384215d88295931cf8f93c9407337057fb7bd8f444acbe8b1b6cb1c605b3c237ee036261788d9f6d09b4a097f3df9882410eed9bb31e5cb1adba84c4de867694ba4a2d9879e784cca68a4aeb611e8156c3add4d262d97e2d51b9ffe00765ed693f1e524e81689267e24acbc1034a1eaac7ab802235bc775954739e25687f531b5b5c8665fed3ccce8275b626c34afc97d574aadb651663ca53d0c072c14466df21f4f7c4ae93b724bd1ad462cba38f69550e3b999fac74e59146176baa39438b8a00c98548342f40ff590573a092397f497b918e25afa3795642db78ecbe0ad5fd22d3630d1b0802b2b264a6be9fa634c712ce1b9e90f3402adcb1fa8e948433e7186b878865f712b3ddd4f801ea1fb812ea15d38bf87a5d6f057594959b03ee494dd"}, @NFTA_DATA_VALUE={0x16, 0x1, "765165b2eccd62c177e79ee8f48c228eae26"}, @NFTA_DATA_VALUE={0x78, 0x1, "c5b2c9339413ce9884977aef232940afc84e35eac21d5129cb3b9bc1621e69fadeed330d593dd5ab230e140873dbadd611f9898b908c7bfcd66bffd3b7fc1d0c89525b1ef0fb66b3c71a80b1d9e532c30334b38e1e86501d4a454e9154835fdd80cc49e0b33be134fef965eb3fe7117999040fc4"}, @NFTA_DATA_VALUE={0x1004, 0x1, "ba0ffde2d77777719d2cc4b300c96350774025add2634890931edd3ce4537cc10c977d06f46a2609f6da84765d549bcfa3c8ab1bd13e4ed342f9d8e05b0503eb2634f2102b133db64185e9ca210125a2cb8869447fd545180996b89686937ce8c7d427170ccd3da81549388f4524c341aa44d0c5e6c79992686809fc9f88a15832d7c260635ef77a85c970da2dc2bbbaed77e2d70c5199d7ee1287dfde54ec3ef3cf84f98dc4d125d65f44f4ece0bd957c0ff8689e20b86d327ed842ef8c76406f7044975a8e0c37101264875c1746dfeb3ccc40212efb620d8c04bb16415c136869194230d765ddbc52076a50b8c1f8fb5f796aef99bbcef277789510fcd3fdfadb4a167b035ebded254da31d0dbf298befb0e88e52307a95f8f33949480246a6fe355763882caeef815baa240baede2e404746844cb5d4bf4841c11c9b61a3fcb80f190ef18dca1d2c344a2c2cb34a18e16de8a67cf6f6503c4c382436639b5c6e1da2fd20e1de6c8dd8aca57b24d322d1f8bf0ca487558a70437025aa527acf75257d25b9f4d0c239198928cbafecc41cd126acd48ad8336fd9a5dddb8ddb63d6bf25157ed8514f7472f90a1b323cbf12717f7abc662e5d96e6e9cbdc3816dfd5bf374d32fd000d64d9e65465dddcf25b3da758d175aa1f059e86150b3e26c0b9ad3ab4e7e0c496a19fd2549ad8d6038b9359f1f9259bc77e6f58941bf45db95e7ee264ce87efdb4cb44d41340be8056db7f8ed8cfce8487db1c9a0f479bffc43ebcef517a48b9985f459ed106283f87fe4671b67bce03c0e07abc86f51fd6f82c4a6240518ffb4728323f51b95c68f3ca02192a7f59c8e9acc1d5d98a76d5915c444601dee942214f04d018786dadc821cef0645b074fc4ac9bcff223d306ba0d8ed2933ad7d300fe6a1c5c07af5437a91f7bb738c37ca9b1a748f2bb6d621b72dfd39ea8bcc5e1d39fba7027e5964cc1b3ffa5b96e1e8080bf98d8704f911e62a7e4db7647c7896252c0e8e1de25baf9ba6fee7c566691661786ff6bd10b3b4bca1054f4cfa7490e0cc49d1c62b9ea390ba8c4ebecfd71e817e2741d9cca68784201ec31efcfa0b735b3951b0706cb2c71d031d3bb96db48ea3dab8747a584a051186f9c30dfaad050ee1e7d464fbc9830dfcf07ab1189d410a9b4924caed11c2143f814479324478576489684c5ce9ecb43fdfd30a762c089420c9198fa2d9531b24f165e2c2dc3ee92b1dc2335d0afe52969198838d164d399504ce2dd911da7f7832f49ff557f5eec8ae006b71b2e65c39de086dc672d1033d266476ae52949fe8493daa64fee646a14276cfb78ea0d37930e0db08ab555d320a9edbc8816e1960dc39036ec1b4b174b15b27ca0aa53622d40defecbb074bd76009ed58802cc05ff3b8889f82a089441fe2822c85da687690287f6a4e35bda8d6ac29025ec8a53864a00e444a188c9a597d98de1707ffdc85f17c92e1f53e38726790462be9144f011e491e479be308b79467d696f15de2fba4e31399341a1a1f0d951ea90338f4ddb51053b87095a573202756806bb40e641c0cf7a29d0d7359e721aadbcb5182c6ceaf572a7a4ac82bb11efd59d140a721d9ad6074a6dedea4dcbe7748d8f36a3b1d310981703b4af787c6adbd79f5e6341230adfc03bd5e19ab70ee35580b6252ddbde04995c61ed2edf3b24e732647dde6cc44301c43df49b0d0e57bd300f167c403f0f8f857e5b9e57b5de571745f1050364d387db4d3b2e1c6c7a2f7ce6ad0523effd35dcc0c51564c68ea77e833ec2a8223baf62fb5faf503395a821452015c869da34adcc0263010f51e9dc300ce4688165043a5139f528f7f089554b641016913b80e03cd5654c33fe2d2e7fc156787607fbf0ad9c6c8471b9237f6ac2ef61873f3667debe04bab38ae639087b2ac8c2fd53797d67f40c7afdaa089772c6017176bfed65e24c953d372f8ce6fbe803c63e5ce55023da60a69026a58396b2fd35b658287c6b309d887fb55d4e3e5ed35cf4a8c0b846ec175d86fd2b8772bad447526546847c6660859dbea97eb365d54eae9ddb58f37628fcd05699818acc0a8a9821a4860a17c0ddae3ce6a9289eb51193e328d5bb3e6be8c3865e9a753b0468e43274663d41e5378aeff31ad733d18b0d0d79af370c7049ffc89603171968e81090098722ccaad92d92dfc4433dc6431f3007ce75f02f9926437fe9f3ad1b549cb01b8566ec61d99243fb828c331ee251a03e564d743ad436ca232dab49d070a0009032abb48f5cdf6fbad86d4ae6067a9b10e5498094e0a01549bf427c1f0d64761d1f054171edfb6d97d0e69a9f2f80daa3648c6b4107fbc8647cf8d079e83ffc8d60d97a47ca15a5f4d54dd4f426c8f809da7d34828818b344ab198f641ee40e0327ea59617f54324e01d9337a5e71233c7c12ee711e3252d6c5eb9e5b47e6533a6e141565fe99f4511baf15a211c4f61f8ec3d60f456b2d639a5afbaf4d389797c84e37a947b062e4b1eb9835e43910085600f450c89d0b961848b301e624697f56de0637a531323d13d173edabe9d4de0e122fcaf2965da1e640936cd5d294be535ccda5fde03d9970ef0701fedc780d56a38348ebf91f3a9897a0130c182e60f37ba24ab97bb55d61e0536c0c10130bffe20bf814f500a4eafe35b4c04b186713585a9ff6ca7c4556a3bafd8401aec747143e39627740a90be10d3bcaa0611778c9d89f3f251a4835d3715671e430aa29cd5dec00fd9510c7c4af6c236d30d6b7df27f80d6e51bbbfc5e25251625d8b7b1be6c45f296cd9c0d7eaa4f10e5e892eb8b82bb83dbf39c2adff649994dba36e3874cc06154f77f7deac5b6869fd727abf615e7efab87b91e93e58a3f6095fdeb465852044dbfa577ccfef88498f9484bc7179fe87368a598e1df1b0740fc272dcf70307fbdac3b7efec0e75dd9e6ae815d30d792f8cf6ca84f5b500b8fb6a6991c8b669843ed80eabe37ff63140ee3aa898bad3dbfc3a11dc793b201981dd980ffbfc4a8211c8648b493b8cac299a2ebc8ce515a7d4c4f818c478d3f052d6ed0377e3b63a4a664903cf0f9a342d243e338607dbb662d3254effef9d7aeec754fd04bcd6095847f37fa3e1f682847345ee5cbacb60a87d8e12aab5e6ce7e16103864089822b8110e3be4efb6c77f7c80bc9dd4bfccc14dc05b671a35cbb1b31599f9b01780a23c329327e7a496223c8cd8703ed1ac1a14b5ccc2d3246063c7efbf41e977323f5395215d4d3ca209213a3825e4e96282edd38ae72e50bb85fba7733d8fac415e0c75e7e955e803be6dd68842e59cfc5ce662dd91fdd36bfd1d3ebe152868a6932751b63442fda840c3b8a13b0066dc68f0b3a6e1d7b91649a6ef2f096147df721482c4de5f5f9998e8abae37912d7cbf3599e868f525617a37ac5e878f7b7349cb158b859a4b68aea633aaa975c3f3c3bb455005cddc023183c7b18c6200faf10b6ad5520c07cbdbe2330737be289b56ca2846ebb002199e746541d661afcc15836bb3c77b00ff25917e6ac85ad314681ec4b92968f1559ec680cef6004c0065dd2ecd9731caa6e33a8cfe2938e531d8d80fa3f9a9cbe5305c09dac4713c66ccd1e96538e63055372ba717b74f57c8edff297773aeaf8a2d744d20fc851e563c43b5be3fd83caf44b4b45f9ef5cd6b8b10aa655c72fab3b71ca65b54590adc7444b50f28fa67d0de67dc900c941321122510800ed848f6f82f882e366b4542c6b06d73867a2138aace6360a8f7e88e69cb9290c68ec35f5c0bc592a14f9cf830671585f6dec2b3cc624d8f5bf0af087a14401b40964346d31847fc5112fa02cbd25738c00bff2ce07c3c607c504e0d3502d7d4008225899973e22f0372304a53bb457172686c3ba3cd30f236fc1984910dac202c9b7b53d60294f65e7e951d7ab11283b8c39d2e79ccfa06d6c1c6bed39b1c2ebd24aca96e482781bb0f324d79cc57b395f03c5068763a56858fe1d4d44ae4942b2fb4be7b57540b105f621fe9ec2b1e673a661f06be30eb05ac41ef93fcaf1cd865a3ee626a4ebe1fa6866f97bdb3d24cf1192cf033e5169a25f524f12a1177e24d5adb98ce271e8973c65284a7566dcd3b8a52283257ae031fddd8209a3b4491e725a734524190e05549368adfb37bf6be9271cd329418884e4be9eea344a773ca4acfd0fb1062a7c4a7322fcbca746e3e4e840a9bc972fcc7ff62f37f793900891248d3df9b35c1c43fb011b7d7b623501bbe72352229c030feff7ffda3ae66a7c9d663502bb871b27f634fa69921ba78042a0a09bd4e6c126268c8c011285194c5deb2418e7678d7ccb7ba4e607e3ab4e0888ba14f6f3fe39a8907a2033363a809cad4cdc810c8355bf7684ffebc0f2c1eea4fe9c22c65f373da2eaea55477588004e5878d26fb41bca7bcc2ca365e931c8718ef5867f704d85f47a761bd7c18d649790a1eb997c69cc1f6da9f5a6e129281f74fd5de6de14cb451be2eca0c7cc5b7c66563442321761a1bd6587b2cce966a5bf8b1d096adb0c45735450ffef162499e638de861931ac02ea3b26da1eb9b1927bd9b2d06cae5c967305bd95ca72536a382ba0fee421ab61360f30fa331b1cd173730443daa42998bb4489e34f6bf77ca47d7c3795d292f6685739a7d396b8638b0df87b920bae9779fc1e9b80dbee74242061e6166153e3b2008e12450c1b64aeea1fad6c6d4f1ba921270f0504e7a0c7dd042e1702dee445d1385abdfd3bd9805c00f1ce1c9ed0504601b477a8ff4ece4d010aafb00fe9b41325e18148709c1df9e53f8b1f08032c8e1775afb4c7acf406113672942522b9f6b07ada8793ecfb360a44989ab710ceb6eba7a22c10de95b4af62dd00136907ccc85f4728bcc75f75068f065010a06baf320d0c0bcf8c4aaa6d1871d1d58820b079201081e628d838a180e66b81bfa402b94aafcb733e74ecc14a0cd1d6a70bd9e2914d6f95d790b30cd2fbc1a3b505ea594f6d8d8e61f58c8209976d0cd793f204f4cd7787cba5e506011c53717d2ab3cf764c7f93c815913774c5052eab542142017f691b9830bc4f2d650c918adb459196a36999585e62473cf0676f6a9824845d11c1eb0bf2e979073e07f9ddbf7fb8a2d65a6370db3be31b18c451993ae362a935b948a0eaa234c231d53d9beac6993f2ede3395b4056172bb569bacea3471c2c4b83c82c1eafa0f701b25a042ed2deafb7734e0c97d428e9958103b0fb976de6990d00f7ab77b0e991ba2fd535c133ee84776153f32e4bbaad1cbdccd0f141b3ed47c5e82d029dd65f7c550fe3b873aae741976c9c3d21eeab28bee6899a99b74d8ebe73bd2d3a05ed716f289f87aa95da8ecfb2ec4f63ee95c63611b8c9d2638d3334ded1296ede4a4b3802ce3f2f30bf2106e04836c1f32c8565bb8508ded2ffe120ea1c762a422229ca1b011b60c74d3d354c4d0ba344f116dc79a0c40c4b1bf3a0ccc62a621e01aff2aaf2208d3c8093d8f886f210edad0fd6235f8278c398fbeee7ed3b67626c65cca95587fe284242d6cc04b894a2484b9ef9b78d8de4b4943e280d4b2cde00b7244ce114377c6ac58045fc61912114eff6a727b47eae73650b43cc96e11aa38286182116eee8668df9e5c7bc22abea8045711793e958659e3940f24726fdbb3d5f86be585c3cf0681706493079c728b197f46aeb662c1426115acd4076ab8a1c259a554404bc785b6809cea35b0a072411ebe5257c1d21a6f4c713454fc8ef9fdcf104d9aa93107607df85b2a07beba"}]}]}, {0x11c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x198, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x76, 0x1, "9b3db9a23c87fb63116e75f9c9a77b92a2037c09ab6407d0a2b5f5f2c773b2f35bae5140212f994e6b3e8fedf2921db417d54b50d4e3758e703d624c4e2716046f730ccc58d480b6477c7b5471b0ebd859ff4ba0bc5e281079ee57b50f94352c0f7c48e4a2a145c710a23550760a68536e55"}, @NFTA_DATA_VALUE={0xdd, 0x1, "ce57190b2cbfe92a1e1e454ba72cef20e486d6fbd26344e4baa4a8ce09c941913ef300fc44ee1daab86c73baee989a70972ec67660bf2cdda7497c0c89435b5fa277b7972b5c6c7398b1daf5222a92ef62a1c2c8ddd2131c32aadb9895313817f8cecb4370957bd2903f084930af7f55effece5ad6cade2569d87eae66e24e223890ff840a2a0fb8e0b2778f69e4ac78c4ee0516a2ef94070d1016a58a7759ce0370468ceb529ff53b00ac6905d928fd0f8c125854e2ff4f1a9381858e0f422f3b50e2426d1e760fa822c75bbfd866e2aea305b8a80777a4f2"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x401}, @NFTA_SET_ELEM_USERDATA={0x1004, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_EXPR={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0xb0b4}, 0x1, 0x0, 0x0, 0x40005}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f00005fb000/0x4000)=nil, 0x4000, 0x0, 0x31, r0, 0x8000000) 09:48:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x6000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 401.909248][ T2294] FAT-fs (loop5): Can't find a valid FAT filesystem [ 401.922026][ T2312] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 401.930068][ T2312] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 401.960322][ T2293] loop1: detected capacity change from 0 to 1 [ 401.968440][ T2324] FAULT_INJECTION: forcing a failure. [ 401.968440][ T2324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.981870][ T2324] CPU: 1 PID: 2324 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 401.992261][ T2324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.002695][ T2324] Call Trace: [ 402.006007][ T2324] dump_stack+0x137/0x19d [ 402.010349][ T2324] should_fail+0x23c/0x250 [ 402.014790][ T2324] should_fail_usercopy+0x16/0x20 [ 402.019817][ T2324] _copy_to_iter+0x17c/0xdd0 [ 402.024416][ T2324] ? finish_task_switch+0xce/0x290 [ 402.029533][ T2324] ? check_stack_object+0x61/0x70 [ 402.034561][ T2324] ? __virt_addr_valid+0x15a/0x1a0 [ 402.039675][ T2324] ? __check_object_size+0x253/0x310 [ 402.044975][ T2324] simple_copy_to_iter+0x4c/0x60 [ 402.049940][ T2324] __skb_datagram_iter+0x23c/0x520 [ 402.055080][ T2324] ? skb_copy_datagram_iter+0xc0/0xc0 [ 402.060459][ T2324] skb_copy_datagram_iter+0x39/0xc0 [ 402.065684][ T2324] unix_stream_read_actor+0x40/0x60 [ 402.071066][ T2324] unix_stream_read_generic+0x691/0x1260 [ 402.077125][ T2324] ? __perf_event_task_sched_out+0xce0/0xd30 [ 402.084214][ T2324] ? rb_erase+0x4bb/0x750 [ 402.089340][ T2324] unix_stream_recvmsg+0x63/0x90 [ 402.094300][ T2324] ? init_peercred+0x180/0x180 [ 402.099090][ T2324] ? unix_stream_sendmsg+0xa90/0xa90 [ 402.104513][ T2324] ____sys_recvmsg+0x15d/0x310 [ 402.109472][ T2324] ? __import_iovec+0x1ff/0x270 [ 402.114414][ T2324] ? import_iovec+0x69/0x80 [ 402.118989][ T2324] do_recvmmsg+0x34c/0x9e0 [ 402.123429][ T2324] ? do_anonymous_page+0x411/0x8b0 [ 402.128624][ T2324] ? fsnotify_perm+0x59/0x2e0 [ 402.133304][ T2324] ? __fsnotify_parent+0x32f/0x430 [ 402.138472][ T2324] ? __fget_light+0x21b/0x260 [ 402.143533][ T2324] ? __cond_resched+0x11/0x40 [ 402.148295][ T2324] __x64_sys_recvmmsg+0xcf/0x150 [ 402.153585][ T2324] ? exit_to_user_mode_prepare+0x65/0x190 [ 402.159603][ T2324] do_syscall_64+0x4a/0x90 [ 402.164034][ T2324] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 402.171369][ T2324] RIP: 0033:0x4665d9 [ 402.175688][ T2324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 402.195690][ T2324] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 402.204288][ T2324] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 09:48:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617409040001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 402.212304][ T2324] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 402.220338][ T2324] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 402.228381][ T2324] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 402.236574][ T2324] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 09:48:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 402.325100][ T2335] loop5: detected capacity change from 0 to 6 [ 402.335158][ T2339] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 402.336929][ T2335] FAT-fs (loop5): bogus logical sector size 1033 [ 402.343379][ T2339] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 402.349725][ T2335] FAT-fs (loop5): Can't find a valid FAT filesystem [ 402.368275][ T2339] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 402.376356][ T2339] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 402.397286][ T2341] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 402.398052][ T2335] loop5: detected capacity change from 0 to 6 [ 402.405622][ T2341] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 402.412096][ T2335] FAT-fs (loop5): bogus logical sector size 1033 [ 402.429197][ T2335] FAT-fs (loop5): Can't find a valid FAT filesystem [ 402.438129][ T2341] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 402.446688][ T2341] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 09:48:28 executing program 2 (fault-call:8 fault-nth:27): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x6800, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:28 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03480080000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:28 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1480, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x61) syz_mount_image$tmpfs(&(0x7f0000001e40), &(0x7f0000001e80)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000100)={[], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) 09:48:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740a040001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:28 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xc0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'vlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3800005, 0x30, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000005e001f", 0x7) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:48:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x6b12, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 402.662154][ T2361] loop1: detected capacity change from 0 to 1 [ 402.672877][ T2364] loop5: detected capacity change from 0 to 6 [ 402.684680][ T2364] FAT-fs (loop5): bogus logical sector size 1034 [ 402.691362][ T2364] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x6c00, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 402.708640][ T2365] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 402.716698][ T2365] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 402.741317][ T2364] loop5: detected capacity change from 0 to 6 [ 402.755000][ T2361] loop1: p2 p3 p4 [ 402.756746][ T2364] FAT-fs (loop5): bogus logical sector size 1034 [ 402.763696][ T2361] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 402.766241][ T2364] FAT-fs (loop5): Can't find a valid FAT filesystem [ 402.774606][ T2361] loop1: p3 start 225 is beyond EOD, truncated [ 402.791889][ T2361] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x7400, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740b040001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 402.827419][ T2365] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 402.835637][ T2365] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 402.860254][ T2361] loop1: detected capacity change from 0 to 1 [ 402.874479][ T2397] FAULT_INJECTION: forcing a failure. [ 402.874479][ T2397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.888125][ T2397] CPU: 0 PID: 2397 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 402.898327][ T2397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.908451][ T2397] Call Trace: [ 402.911739][ T2397] dump_stack+0x137/0x19d [ 402.916075][ T2397] should_fail+0x23c/0x250 [ 402.920502][ T2397] should_fail_usercopy+0x16/0x20 [ 402.930022][ T2397] _copy_to_iter+0x17c/0xdd0 [ 402.934723][ T2397] ? finish_task_switch+0xce/0x290 [ 402.939936][ T2397] ? check_stack_object+0x61/0x70 [ 402.944970][ T2397] ? __virt_addr_valid+0x15a/0x1a0 [ 402.950088][ T2397] ? __check_object_size+0x253/0x310 [ 402.955393][ T2397] simple_copy_to_iter+0x4c/0x60 [ 402.960353][ T2397] ? skb_copy_datagram_iter+0xc0/0xc0 [ 402.965819][ T2397] __skb_datagram_iter+0xac/0x520 [ 402.970885][ T2397] ? ___cache_free+0x3c/0x300 [ 402.975677][ T2397] ? kfree+0xf0/0x1d0 [ 402.979751][ T2397] ? __kfree_skb+0xfe/0x150 [ 402.984260][ T2397] skb_copy_datagram_iter+0x39/0xc0 [ 402.989575][ T2397] unix_stream_read_actor+0x40/0x60 [ 402.994776][ T2397] unix_stream_read_generic+0x691/0x1260 [ 403.000595][ T2397] ? init_wait_entry+0x30/0x30 [ 403.005611][ T2397] unix_stream_recvmsg+0x63/0x90 [ 403.010578][ T2397] ? init_peercred+0x180/0x180 [ 403.015443][ T2397] ? unix_stream_sendmsg+0xa90/0xa90 [ 403.020792][ T2397] ____sys_recvmsg+0x15d/0x310 [ 403.025628][ T2397] ? __import_iovec+0x1ff/0x270 [ 403.030503][ T2397] ? import_iovec+0x69/0x80 [ 403.035121][ T2397] do_recvmmsg+0x34c/0x9e0 [ 403.039774][ T2397] ? do_anonymous_page+0x411/0x8b0 [ 403.044993][ T2397] ? fsnotify_perm+0x59/0x2e0 [ 403.049676][ T2397] ? __fsnotify_parent+0x32f/0x430 [ 403.054800][ T2397] ? __fget_light+0x21b/0x260 [ 403.059479][ T2397] ? __cond_resched+0x11/0x40 [ 403.064155][ T2397] __x64_sys_recvmmsg+0xcf/0x150 [ 403.069113][ T2397] ? exit_to_user_mode_prepare+0x65/0x190 [ 403.074882][ T2397] do_syscall_64+0x4a/0x90 [ 403.079415][ T2397] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 403.085353][ T2397] RIP: 0033:0x4665d9 [ 403.089325][ T2397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 403.109039][ T2397] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 403.117476][ T2397] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 403.125625][ T2397] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 403.133796][ T2397] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 403.141775][ T2397] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 403.150106][ T2397] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 403.171109][ T1032] loop1: p2 p3 p4 09:48:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x7800, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 403.175066][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 403.183715][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 403.190352][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 403.206905][ T2361] loop1: p2 p3 p4 [ 403.210869][ T2361] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 403.221059][ T2405] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 403.223267][ T2410] loop5: detected capacity change from 0 to 6 [ 403.229120][ T2405] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 403.236608][ T2410] FAT-fs (loop5): bogus logical sector size 1035 [ 403.247825][ T2361] loop1: p3 start 225 is beyond EOD, [ 403.252812][ T2410] FAT-fs (loop5): Can't find a valid FAT filesystem [ 403.264868][ T2361] truncated [ 403.267978][ T2361] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 403.271782][ T2405] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 403.283121][ T2405] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 403.324350][ T2410] loop5: detected capacity change from 0 to 6 [ 403.330833][ T2410] FAT-fs (loop5): bogus logical sector size 1035 [ 403.337278][ T2410] FAT-fs (loop5): Can't find a valid FAT filesystem [ 403.371821][ T1032] loop1: p2 p3 p4 [ 403.375751][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 403.384195][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 403.390697][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:29 executing program 2 (fault-call:8 fault-nth:28): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x7a00, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:29 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff034c0080000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740c040001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8303, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:29 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) sendto$inet(0xffffffffffffffff, &(0x7f0000000740)="43a8378d22241ad9934c8219dd1cd0d9056cb0f28fc497145dd4501c721ab5018cb009d87427a78de1e24475dfc1a9f59c5c3e89be672194155a4a85ba1a25f0babd42ff6cf5dd3e2fcf8bd229656ced77c06f921f6a09bb4039a5007ff1bafde7f3e0ff7ba7900b34011e32cde79b69aebb3cd032c1582d56d8906b6a480ec2b92c93c1e062e6aed508abe995f238f52365d7ba6ad61cd24836453482d51ff27068f3b76fbad901", 0xa8, 0x4, &(0x7f00000008c0)={0x2, 0x4e23, @broadcast}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000800)="66530700ae897094e7b126b0aaeaa769be6d05d71bd34e677d114b654b499374a8db000800000000000023c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5b", 0x87}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280)) getsockname(r2, &(0x7f0000000680)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000700)=0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000140)=""/227, 0xe3}, {&(0x7f0000000300)=""/219, 0xdb}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000000580)=""/4, 0x4}, {&(0x7f00000005c0)=""/60, 0x3c}], 0x8, 0xfffffffb, 0x800) exit_group(0x0) [ 403.564881][ T2441] loop1: detected capacity change from 0 to 1 [ 403.573018][ T2445] loop5: detected capacity change from 0 to 6 [ 403.579950][ T2445] FAT-fs (loop5): bogus logical sector size 1036 [ 403.586343][ T2445] FAT-fs (loop5): Can't find a valid FAT filesystem [ 403.598433][ T2443] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 09:48:29 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) prctl$PR_CAPBSET_READ(0x18, 0x24) prctl$PR_CAPBSET_READ(0x17, 0x24) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbb009e92817", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@nodots}]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000280)) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1, 0x9, 0x391fb461) 09:48:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8403, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 403.606583][ T2443] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 403.619139][ T2443] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 403.627190][ T2443] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 403.647376][ T2441] loop1: p2 p3 p4 [ 403.649730][ T2445] loop5: detected capacity change from 0 to 6 [ 403.657170][ T2441] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 403.666145][ T2445] FAT-fs (loop5): bogus logical sector size 1036 [ 403.672534][ T2445] FAT-fs (loop5): Can't find a valid FAT filesystem [ 403.693495][ T2466] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 403.701714][ T2441] loop1: p3 start 225 is beyond EOD, truncated 09:48:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8503, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740d040001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:29 executing program 3: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x20, 0x6, 0x3, 0x79e}, {0x8, 0x5, 0x81, 0x5}, {0x1, 0x81, 0x6, 0x8}, {0x9, 0x1, 0x4, 0x1}]}, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @ra={0x94, 0x4, 0x1}]}}}], 0x18}, 0x0) [ 403.701826][ T2466] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 403.707930][ T2441] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 403.789374][ T2441] loop1: detected capacity change from 0 to 1 [ 403.810441][ T2484] FAULT_INJECTION: forcing a failure. [ 403.810441][ T2484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.823517][ T2484] CPU: 1 PID: 2484 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 403.833595][ T2484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.843742][ T2484] Call Trace: [ 403.847070][ T2484] dump_stack+0x137/0x19d [ 403.851408][ T2484] should_fail+0x23c/0x250 [ 403.855834][ T2484] should_fail_usercopy+0x16/0x20 [ 403.860919][ T2484] _copy_to_iter+0x17c/0xdd0 [ 403.865530][ T2484] ? finish_task_switch+0xce/0x290 [ 403.870659][ T2484] ? check_stack_object+0x61/0x70 [ 403.875894][ T2484] ? __virt_addr_valid+0x15a/0x1a0 [ 403.881015][ T2484] ? __check_object_size+0x253/0x310 [ 403.886423][ T2484] simple_copy_to_iter+0x4c/0x60 [ 403.891441][ T2484] __skb_datagram_iter+0x23c/0x520 [ 403.896556][ T2484] ? skb_copy_datagram_iter+0xc0/0xc0 [ 403.901981][ T2484] skb_copy_datagram_iter+0x39/0xc0 [ 403.907357][ T2484] unix_stream_read_actor+0x40/0x60 [ 403.912570][ T2484] unix_stream_read_generic+0x691/0x1260 [ 403.918226][ T2484] unix_stream_recvmsg+0x63/0x90 [ 403.923210][ T2484] ? init_peercred+0x180/0x180 [ 403.928068][ T2484] ? unix_stream_sendmsg+0xa90/0xa90 [ 403.933408][ T2484] ____sys_recvmsg+0x15d/0x310 [ 403.938186][ T2484] ? __import_iovec+0x1ff/0x270 [ 403.943378][ T2484] ? import_iovec+0x69/0x80 [ 403.947911][ T2484] do_recvmmsg+0x34c/0x9e0 [ 403.952375][ T2484] ? do_anonymous_page+0x411/0x8b0 [ 403.957500][ T2484] ? fsnotify_perm+0x59/0x2e0 [ 403.962205][ T2484] ? __fsnotify_parent+0x32f/0x430 [ 403.967521][ T2484] ? __fget_light+0x21b/0x260 [ 403.972268][ T2484] ? __cond_resched+0x11/0x40 [ 403.976963][ T2484] __x64_sys_recvmmsg+0xcf/0x150 [ 403.981905][ T2484] ? exit_to_user_mode_prepare+0x65/0x190 [ 403.987724][ T2484] do_syscall_64+0x4a/0x90 [ 403.992301][ T2484] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 403.998370][ T2484] RIP: 0033:0x4665d9 [ 404.002280][ T2484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 404.021896][ T2484] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 404.030427][ T2484] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 404.038411][ T2484] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 404.046389][ T2484] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 404.054359][ T2484] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 404.062713][ T2484] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 404.113043][ T2441] loop1: p2 p3 p4 [ 404.116975][ T2441] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 404.122883][ T2487] loop5: detected capacity change from 0 to 6 [ 404.130572][ T2441] loop1: p3 start 225 is beyond EOD, truncated [ 404.136778][ T2441] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 404.142230][ T2487] FAT-fs (loop5): bogus logical sector size 1037 [ 404.150347][ T2487] FAT-fs (loop5): Can't find a valid FAT filesystem [ 404.192428][ T2487] loop5: detected capacity change from 0 to 6 [ 404.199199][ T2487] FAT-fs (loop5): bogus logical sector size 1037 [ 404.205628][ T2487] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:30 executing program 2 (fault-call:8 fault-nth:29): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8603, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:30 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03600080000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740e040001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:30 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x430, 0x3f3, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x38, [0x0, 0x1, 0x4, 0x6, 0xfff, 0x2, 0xb839, 0x81, 0x7, 0x6, 0x1, 0x3448, 0x2d5e, 0x1000, 0x3, 0x8, 0x4, 0x400, 0x7fffffff, 0xeb8, 0x4, 0x20, 0x2, 0xfff, 0xfffeffff, 0x931, 0xe60, 0x8, 0x3, 0x1000, 0x7, 0x1, 0x91c3, 0x1, 0x7fffffff, 0x4, 0x0, 0x1000, 0x6, 0x8, 0x3, 0x401, 0x4, 0x2, 0x6, 0x1, 0x7, 0x3, 0x0, 0x3, 0x7, 0x2, 0x4, 0x0, 0xffff0001, 0x3, 0x3f, 0xb1f, 0xcf05, 0x5, 0x8001, 0x4, 0x0, 0xce8a], [0x0, 0x1, 0x400, 0x80e, 0xe, 0x8000, 0x4494, 0x6, 0x3, 0x7ff, 0x0, 0x1, 0x7ff, 0xffffafb1, 0x6, 0x80000001, 0x81, 0x5, 0x0, 0x3, 0x8, 0xffff, 0x1, 0x4, 0x6d2, 0x0, 0x0, 0x5, 0x2, 0x7fff, 0x0, 0x7fffffff, 0x3, 0x10001, 0x41, 0x0, 0x101, 0xfffffff9, 0x7, 0x2, 0xbf, 0x6, 0xe0a4, 0x1f, 0x8000, 0x5, 0x6, 0x5, 0x8, 0x7, 0x1, 0x80000000, 0x4, 0x9, 0x1, 0x8, 0x7fff, 0x6, 0x8, 0x1000, 0x48, 0x4b, 0x1, 0x80], [0x8, 0x1f0, 0x3, 0xfffffffc, 0x8, 0x9, 0x4, 0x400, 0x1ff, 0x401, 0x3, 0x0, 0x400, 0x4, 0x0, 0x9, 0x9, 0x9, 0x164c711f, 0x800, 0x1000, 0xfffffff8, 0x9, 0x4, 0x9, 0x4, 0x10001, 0x1, 0x6e2, 0x9, 0xcab, 0x5, 0x4, 0x8e, 0xfffffffa, 0x0, 0x5, 0xdd18, 0x5, 0x3ff, 0x9, 0x80000000, 0x2, 0x9, 0xf0, 0xa9e, 0x4, 0x2, 0xfffffdd0, 0x3, 0x8, 0x7, 0x9, 0x8, 0x10000, 0xfffffff7, 0x981e, 0x200, 0x1c0, 0x4, 0x401, 0xffffffff, 0x4], [0x1, 0xffffffff, 0x80000000, 0x7, 0x0, 0x200, 0x1, 0xc9d, 0x7, 0x9, 0xb, 0x3, 0xd0d, 0x86, 0x7, 0x48000, 0x68, 0x3e, 0x7, 0x5a, 0x5, 0x1ff, 0x101, 0xfffffe01, 0x20, 0x81, 0x7fffffff, 0x81, 0xaf, 0x6, 0x8001, 0xffffffff, 0x7, 0x0, 0x5, 0x7, 0x5, 0x8, 0x4, 0xfffffff8, 0xa21c, 0x0, 0xff, 0x4, 0x800, 0xfffeffff, 0x8b, 0x2, 0x8, 0x0, 0xe9d0, 0x4, 0xffffffff, 0xfffffff9, 0xffffffff, 0x9000, 0xfff, 0x9, 0xfffff000, 0x8001, 0x576, 0x1f, 0x440d, 0x1], 0x10, ['(#\x00', '-%##1@{\x00', '\x00', '$\x00', '{\x00']}, ["", "", "", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x420}, 0x420}}, 0x0) 09:48:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8703, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 404.459879][ T2519] loop5: detected capacity change from 0 to 6 [ 404.461195][ T2517] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 404.471120][ T2519] FAT-fs (loop5): bogus logical sector size 1038 [ 404.474586][ T2517] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 404.480920][ T2519] FAT-fs (loop5): Can't find a valid FAT filesystem [ 404.497130][ T2521] loop1: detected capacity change from 0 to 1 09:48:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8803, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:30 executing program 3: write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x4, 0x3, 0x5}, 0xffffffff}}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x8}, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x40032, 0xffffffffffffffff, 0x200000000000) mprotect(&(0x7f0000dfb000/0x3000)=nil, 0x3000, 0x4) [ 404.512415][ T2517] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 404.520537][ T2517] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 09:48:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8903, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 404.563650][ T2521] loop1: p2 p3 p4 [ 404.567695][ T2521] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 404.581410][ T2534] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 404.587100][ T2521] loop1: p3 start 225 is beyond EOD, [ 404.589425][ T2534] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 404.604890][ T2519] loop5: detected capacity change from 0 to 6 09:48:30 executing program 3: wait4(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x60280, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) setfsuid(0xffffffffffffffff) setfsuid(0xee01) [ 404.605901][ T2521] truncated [ 404.615135][ T2521] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 404.628669][ T2519] FAT-fs (loop5): bogus logical sector size 1038 [ 404.635458][ T2519] FAT-fs (loop5): Can't find a valid FAT filesystem [ 404.666616][ T2544] FAULT_INJECTION: forcing a failure. [ 404.666616][ T2544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.679755][ T2544] CPU: 0 PID: 2544 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 404.689953][ T2544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.700021][ T2544] Call Trace: [ 404.703302][ T2544] dump_stack+0x137/0x19d [ 404.707668][ T2544] should_fail+0x23c/0x250 [ 404.712138][ T2544] should_fail_usercopy+0x16/0x20 [ 404.717275][ T2544] _copy_to_iter+0x17c/0xdd0 [ 404.722035][ T2544] ? finish_task_switch+0xce/0x290 [ 404.727162][ T2544] ? check_stack_object+0x61/0x70 [ 404.732193][ T2544] ? __virt_addr_valid+0x15a/0x1a0 [ 404.737331][ T2544] ? __check_object_size+0x253/0x310 [ 404.742627][ T2544] simple_copy_to_iter+0x4c/0x60 [ 404.747718][ T2544] ? skb_copy_datagram_iter+0xc0/0xc0 [ 404.753213][ T2544] __skb_datagram_iter+0xac/0x520 [ 404.758395][ T2544] ? ___cache_free+0x3c/0x300 [ 404.763293][ T2544] ? kfree+0xf0/0x1d0 [ 404.767278][ T2544] ? __kfree_skb+0xfe/0x150 [ 404.771866][ T2544] skb_copy_datagram_iter+0x39/0xc0 [ 404.777103][ T2544] unix_stream_read_actor+0x40/0x60 [ 404.782412][ T2544] unix_stream_read_generic+0x691/0x1260 [ 404.788165][ T2544] ? init_wait_entry+0x30/0x30 [ 404.792935][ T2544] unix_stream_recvmsg+0x63/0x90 [ 404.797953][ T2544] ? init_peercred+0x180/0x180 [ 404.802724][ T2544] ? unix_stream_sendmsg+0xa90/0xa90 [ 404.808171][ T2544] ____sys_recvmsg+0x15d/0x310 [ 404.812934][ T2544] ? __import_iovec+0x1ff/0x270 [ 404.817795][ T2544] ? import_iovec+0x69/0x80 [ 404.822299][ T2544] do_recvmmsg+0x34c/0x9e0 [ 404.826734][ T2544] ? do_anonymous_page+0x411/0x8b0 [ 404.831858][ T2544] ? fsnotify_perm+0x59/0x2e0 [ 404.836536][ T2544] ? __fsnotify_parent+0x32f/0x430 [ 404.841790][ T2544] ? __fget_light+0x21b/0x260 [ 404.846469][ T2544] ? __cond_resched+0x11/0x40 [ 404.851330][ T2544] __x64_sys_recvmmsg+0xcf/0x150 [ 404.856348][ T2544] ? exit_to_user_mode_prepare+0x65/0x190 [ 404.862146][ T2544] do_syscall_64+0x4a/0x90 [ 404.866566][ T2544] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 404.872464][ T2544] RIP: 0033:0x4665d9 [ 404.876624][ T2544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 404.896414][ T2544] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 404.904844][ T2544] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 09:48:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 404.912841][ T2544] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 404.921429][ T2544] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 404.929492][ T2544] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 404.937485][ T2544] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 405.026757][ T2560] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 405.034922][ T2560] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 405.047160][ T2560] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 405.055497][ T2560] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 405.073551][ T2564] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 405.081608][ T2564] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 405.093613][ T2564] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 405.101628][ T2564] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 09:48:31 executing program 2 (fault-call:8 fault-nth:30): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:31 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x2a0d01) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sctp\x00') ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x1, 0x3c, 0x1f}) writev(r0, &(0x7f0000002800)=[{&(0x7f00000005c0)="894220a3b88448cf634f966d895e49b2711d8d94ab86f124de3aa65f", 0x1c}], 0x1) 09:48:31 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03680080000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740f040001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8a03, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8b03, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:31 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x456a4056fdf54760) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="2321ef09"], 0x35) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000340)) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 405.357450][ T2573] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 405.358293][ T2576] loop1: detected capacity change from 0 to 1 [ 405.365521][ T2573] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 405.380462][ T2577] loop5: detected capacity change from 0 to 6 [ 405.393218][ T2577] FAT-fs (loop5): bogus logical sector size 1039 [ 405.399761][ T2577] FAT-fs (loop5): Can't find a valid FAT filesystem [ 405.412194][ T2573] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 405.420217][ T2573] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 405.431806][ T2576] loop1: p2 p3 p4 [ 405.441432][ T2576] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 405.458088][ T2577] loop5: detected capacity change from 0 to 6 [ 405.461026][ T2576] loop1: p3 start 225 is beyond EOD, truncated [ 405.470400][ T2576] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 405.489449][ T2577] FAT-fs (loop5): bogus logical sector size 1039 [ 405.496123][ T2577] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8f26, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 405.509031][ T2594] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 405.517069][ T2594] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 405.532674][ T2602] FAULT_INJECTION: forcing a failure. [ 405.532674][ T2602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.545764][ T2602] CPU: 1 PID: 2602 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 405.555841][ T2602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.565894][ T2602] Call Trace: [ 405.569169][ T2602] dump_stack+0x137/0x19d [ 405.573526][ T2602] should_fail+0x23c/0x250 [ 405.578052][ T2602] should_fail_usercopy+0x16/0x20 [ 405.583106][ T2602] _copy_to_iter+0x17c/0xdd0 [ 405.588133][ T2602] ? finish_task_switch+0xce/0x290 [ 405.593333][ T2602] ? check_stack_object+0x61/0x70 [ 405.598531][ T2602] ? __virt_addr_valid+0x15a/0x1a0 [ 405.603752][ T2602] ? __check_object_size+0x253/0x310 [ 405.609275][ T2602] simple_copy_to_iter+0x4c/0x60 [ 405.614220][ T2602] __skb_datagram_iter+0x23c/0x520 [ 405.619347][ T2602] ? skb_copy_datagram_iter+0xc0/0xc0 [ 405.624792][ T2602] skb_copy_datagram_iter+0x39/0xc0 [ 405.630109][ T2602] unix_stream_read_actor+0x40/0x60 [ 405.635323][ T2602] unix_stream_read_generic+0x691/0x1260 [ 405.641150][ T2602] unix_stream_recvmsg+0x63/0x90 [ 405.646098][ T2602] ? init_peercred+0x180/0x180 [ 405.650906][ T2602] ? unix_stream_sendmsg+0xa90/0xa90 [ 405.656213][ T2602] ____sys_recvmsg+0x15d/0x310 [ 405.661231][ T2602] ? __import_iovec+0x1ff/0x270 [ 405.666087][ T2602] ? import_iovec+0x69/0x80 [ 405.670594][ T2602] do_recvmmsg+0x34c/0x9e0 [ 405.675149][ T2602] ? do_anonymous_page+0x411/0x8b0 [ 405.680478][ T2602] ? fsnotify_perm+0x59/0x2e0 [ 405.685245][ T2602] ? __fsnotify_parent+0x32f/0x430 [ 405.690379][ T2602] ? __fget_light+0x21b/0x260 [ 405.695064][ T2602] ? __cond_resched+0x11/0x40 [ 405.699749][ T2602] __x64_sys_recvmmsg+0xcf/0x150 [ 405.704751][ T2602] ? exit_to_user_mode_prepare+0x65/0x190 [ 405.710675][ T2602] do_syscall_64+0x4a/0x90 [ 405.715334][ T2602] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 405.721554][ T2602] RIP: 0033:0x4665d9 [ 405.725460][ T2602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 405.745239][ T2602] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 405.754371][ T2602] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 09:48:32 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = dup2(r0, r0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', r2, 0x2f, 0x1, 0x1f, 0x1, 0x29, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x7, 0x1, 0x8, 0x5}}) [ 405.762346][ T2602] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 405.770810][ T2602] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 405.779597][ T2602] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 405.787703][ T2602] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 09:48:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617410040001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 405.822773][ T2576] loop1: detected capacity change from 0 to 1 [ 405.863114][ T2576] loop1: p2 p3 p4 [ 405.874513][ T2576] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 405.887315][ T2576] loop1: p3 start 225 is beyond EOD, truncated [ 405.893731][ T2576] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 405.907969][ T2620] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 405.916066][ T2620] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 405.942024][ T2620] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 405.943944][ T2627] loop5: detected capacity change from 0 to 6 [ 405.950108][ T2620] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 405.972809][ T2627] FAT-fs (loop5): bogus logical sector size 1040 [ 405.979229][ T2627] FAT-fs (loop5): Can't find a valid FAT filesystem [ 405.981242][ T2630] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 405.994592][ T2630] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 406.006653][ T2630] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 406.014674][ T2630] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 406.037136][ T2627] loop5: detected capacity change from 0 to 6 [ 406.051268][ T2627] FAT-fs (loop5): bogus logical sector size 1040 [ 406.057713][ T2627] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:32 executing program 2 (fault-call:8 fault-nth:31): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:32 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff036c0080000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xa503, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e0500000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ae340b7677a0e5bf5ff1b0816f3f6db1c000100000000000000495f0000001c00000006ad8e5e00000089da8d0f00"}, 0x80) getsockname$packet(r1, &(0x7f0000000240), &(0x7f00000002c0)=0xfeeb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r6 = dup2(r3, r3) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x3}, 0x0, r5}) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000400ad000200000000000006040000000000000000", 0x39}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000300)={r7, 0x1, 0x6, @multicast}, 0x10) 09:48:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617411040001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xa603, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 406.240668][ T2645] loop1: detected capacity change from 0 to 1 [ 406.257999][ T2655] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 406.267171][ T2650] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 406.267653][ T2655] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 406.275289][ T2650] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 406.295207][ T2645] loop1: p2 p3 p4 [ 406.296672][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): Y­4`Ò˜: link becomes ready [ 406.299125][ T2645] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 406.310238][ T2654] loop5: detected capacity change from 0 to 6 [ 406.339399][ T2654] FAT-fs (loop5): bogus logical sector size 1041 [ 406.342600][ T2645] loop1: p3 start 225 is beyond EOD, [ 406.346154][ T2654] FAT-fs (loop5): Can't find a valid FAT filesystem [ 406.346198][ T2645] truncated [ 406.363097][ T2645] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 406.372622][ T2650] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 09:48:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="7000880000010b04000000000000000002002656cd3e5dd700010000001f0000008008000100ac141400080002007f0000010c000280050001000000000002000480e8ff004000000000240002801400018008000100ac1414bb08000200000000001c001b8005000100000000000800074000000000d00492ba5ae480bfdcbeed81f7a6874b5f46186815e54f83f22de233609d29dabe02bda8986a4d72858760c1baa9855631efe8cc3fcb755b5a48c6812c278a8f"], 0x70}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="04002cbd7000ffdbdf2517000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000500000006001600080000000500120000000000080001007063690011000200303030303a30303a31302e3000000000080003000400000008000b0004000000060016002b0000000500120001000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b000800000006001600080000000500120000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4040811}, 0x10) 09:48:32 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03740080000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xaf26, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 406.381105][ T2650] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 406.395427][ T2655] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 406.409157][ T2668] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 406.471206][ T2675] FAULT_INJECTION: forcing a failure. [ 406.471206][ T2675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.487959][ T2675] CPU: 1 PID: 2675 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 406.499863][ T2675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 406.510475][ T2675] Call Trace: [ 406.513780][ T2675] dump_stack+0x137/0x19d [ 406.518618][ T2675] should_fail+0x23c/0x250 [ 406.523256][ T2675] should_fail_usercopy+0x16/0x20 [ 406.528453][ T2675] _copy_to_iter+0x17c/0xdd0 [ 406.533708][ T2675] ? check_stack_object+0x61/0x70 [ 406.539039][ T2675] ? __virt_addr_valid+0x15a/0x1a0 [ 406.544844][ T2675] ? __check_object_size+0x253/0x310 [ 406.550368][ T2675] simple_copy_to_iter+0x4c/0x60 [ 406.555721][ T2675] ? skb_copy_datagram_iter+0xc0/0xc0 [ 406.562071][ T2675] __skb_datagram_iter+0xac/0x520 [ 406.567274][ T2675] ? ___cache_free+0x3c/0x300 [ 406.572818][ T2675] ? kfree+0xf0/0x1d0 [ 406.576836][ T2675] ? __kfree_skb+0xfe/0x150 [ 406.581968][ T2675] skb_copy_datagram_iter+0x39/0xc0 [ 406.587392][ T2675] unix_stream_read_actor+0x40/0x60 [ 406.592620][ T2675] unix_stream_read_generic+0x691/0x1260 [ 406.598385][ T2675] ? __perf_event_task_sched_out+0xce0/0xd30 [ 406.604390][ T2675] ? rb_erase+0x4cb/0x750 [ 406.608811][ T2675] unix_stream_recvmsg+0x63/0x90 [ 406.614207][ T2675] ? init_peercred+0x180/0x180 [ 406.619193][ T2675] ? unix_stream_sendmsg+0xa90/0xa90 [ 406.624684][ T2675] ____sys_recvmsg+0x15d/0x310 [ 406.632457][ T2675] ? __import_iovec+0x1ff/0x270 [ 406.637323][ T2675] ? import_iovec+0x69/0x80 [ 406.641903][ T2675] do_recvmmsg+0x34c/0x9e0 [ 406.646344][ T2675] ? do_anonymous_page+0x411/0x8b0 [ 406.651569][ T2675] ? fsnotify_perm+0x59/0x2e0 [ 406.657575][ T2675] ? __fsnotify_parent+0x32f/0x430 [ 406.663178][ T2675] ? __fget_light+0x21b/0x260 [ 406.668014][ T2675] ? __cond_resched+0x11/0x40 [ 406.672780][ T2675] __x64_sys_recvmmsg+0xcf/0x150 [ 406.677768][ T2675] ? exit_to_user_mode_prepare+0x65/0x190 [ 406.685007][ T2675] do_syscall_64+0x4a/0x90 [ 406.689464][ T2675] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 406.696066][ T2675] RIP: 0033:0x4665d9 [ 406.700065][ T2675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 406.720215][ T2675] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 406.728745][ T2675] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 406.736946][ T2675] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 406.745138][ T2675] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 406.753123][ T2675] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 09:48:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617412040001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 406.761209][ T2675] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 09:48:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xbc26, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 406.806783][ T2688] loop1: detected capacity change from 0 to 1 [ 406.847167][ T2688] loop1: p2 p3 p4 [ 406.851243][ T2688] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 406.870313][ T2688] loop1: p3 start 225 is beyond EOD, truncated [ 406.876548][ T2688] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 406.880179][ T2698] loop5: detected capacity change from 0 to 6 [ 406.903817][ T2698] FAT-fs (loop5): bogus logical sector size 1042 [ 406.910207][ T2698] FAT-fs (loop5): Can't find a valid FAT filesystem [ 406.931998][ T2688] loop1: detected capacity change from 0 to 1 [ 406.972899][ T2688] loop1: p2 p3 p4 [ 406.977017][ T2688] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 406.979429][ T2698] loop5: detected capacity change from 0 to 6 [ 406.985918][ T2688] loop1: p3 start 225 is beyond EOD, truncated [ 406.996712][ T2688] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 406.998449][ T2698] FAT-fs (loop5): bogus logical sector size 1042 [ 407.010905][ T2698] FAT-fs (loop5): Can't find a valid FAT filesystem [ 407.018349][ T1032] loop1: p2 p3 p4 [ 407.022315][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 407.029688][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 407.035893][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xbf26, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:33 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff037a0080000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:33 executing program 2 (fault-call:8 fault-nth:32): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendfile(r1, r0, &(0x7f0000000100)=0x20, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x100000000000003, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@rights={{0x18, 0x1, 0x1, [r0, r2]}}], 0x18}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000796000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xa3a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000280)=""/187) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x4, 0x0, 0x5, 0xb, 0x0, 0x7fc, 0xd2a91, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffdffffc, 0x0, 0x0, 0x8280, 0x0, 0x5, 0x3, 0xfffffffffffffff8, 0x8, 0x1ff}, 0x0, 0x7, 0xffffffffffffffff, 0xa) r5 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r5, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f00008a7000/0x1000)=nil, 0x3000) shmctl$SHM_UNLOCK(r5, 0xc) 09:48:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617422040001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xd601, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617425040001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:33 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900010000000000000000007f0000010000000000000000000003000000000000000000000000000000000000000000000000000a20000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x48, &(0x7f00000005c0)=ANY=[@ANYRES64], 0x90) 09:48:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xd701, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 407.162924][ T2736] loop5: detected capacity change from 0 to 6 [ 407.174414][ T2736] FAT-fs (loop5): bogus logical sector size 1058 [ 407.180900][ T2736] FAT-fs (loop5): Can't find a valid FAT filesystem [ 407.186795][ T2733] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 407.195645][ T2733] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 407.227563][ T2743] loop1: detected capacity change from 0 to 1 [ 407.264319][ T2733] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 09:48:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xdb01, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 407.272466][ T2733] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 407.288867][ T2743] loop1: p2 p3 p4 [ 407.293321][ T2743] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 407.302673][ T2753] loop5: detected capacity change from 0 to 6 [ 407.309006][ T2743] loop1: p3 start 225 is beyond EOD, truncated [ 407.315342][ T2743] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:33 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0xc000907b, 0x0, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x80000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11f08) [ 407.328352][ T2753] FAT-fs (loop5): bogus logical sector size 1061 [ 407.334746][ T2753] FAT-fs (loop5): Can't find a valid FAT filesystem [ 407.345616][ T2761] FAULT_INJECTION: forcing a failure. [ 407.345616][ T2761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.358824][ T2761] CPU: 0 PID: 2761 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 407.368900][ T2761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.378954][ T2761] Call Trace: [ 407.382250][ T2761] dump_stack+0x137/0x19d [ 407.386613][ T2761] should_fail+0x23c/0x250 [ 407.391033][ T2761] should_fail_usercopy+0x16/0x20 [ 407.396090][ T2761] _copy_to_iter+0x17c/0xdd0 [ 407.400683][ T2761] ? check_stack_object+0x61/0x70 [ 407.405713][ T2761] ? __virt_addr_valid+0x15a/0x1a0 [ 407.410822][ T2761] ? __check_object_size+0x253/0x310 [ 407.416204][ T2761] simple_copy_to_iter+0x4c/0x60 [ 407.421179][ T2761] __skb_datagram_iter+0x23c/0x520 [ 407.426307][ T2761] ? skb_copy_datagram_iter+0xc0/0xc0 [ 407.431773][ T2761] skb_copy_datagram_iter+0x39/0xc0 [ 407.436981][ T2761] unix_stream_read_actor+0x40/0x60 [ 407.442204][ T2761] unix_stream_read_generic+0x691/0x1260 [ 407.447842][ T2761] ? init_wait_entry+0x30/0x30 [ 407.452606][ T2761] unix_stream_recvmsg+0x63/0x90 [ 407.457568][ T2761] ? init_peercred+0x180/0x180 [ 407.462340][ T2761] ? unix_stream_sendmsg+0xa90/0xa90 [ 407.468673][ T2761] ____sys_recvmsg+0x15d/0x310 [ 407.473566][ T2761] ? __import_iovec+0x1ff/0x270 [ 407.478465][ T2761] ? import_iovec+0x69/0x80 [ 407.482993][ T2761] do_recvmmsg+0x34c/0x9e0 [ 407.487419][ T2761] ? do_anonymous_page+0x411/0x8b0 [ 407.492560][ T2761] ? fsnotify_perm+0x59/0x2e0 [ 407.497364][ T2761] ? __fsnotify_parent+0x32f/0x430 [ 407.502631][ T2761] ? __fget_light+0x21b/0x260 [ 407.507327][ T2761] ? __cond_resched+0x11/0x40 [ 407.512010][ T2761] __x64_sys_recvmmsg+0xcf/0x150 [ 407.517042][ T2761] ? exit_to_user_mode_prepare+0x65/0x190 [ 407.522861][ T2761] do_syscall_64+0x4a/0x90 [ 407.527294][ T2761] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 407.533200][ T2761] RIP: 0033:0x4665d9 [ 407.537108][ T2761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 407.556978][ T2761] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 407.565396][ T2761] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 407.573368][ T2761] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 407.581390][ T2761] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 407.589459][ T2761] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 407.597524][ T2761] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 407.625857][ T2762] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 407.633917][ T2762] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 407.658309][ T2753] loop5: detected capacity change from 0 to 6 [ 407.665266][ T2753] FAT-fs (loop5): bogus logical sector size 1061 [ 407.671745][ T2753] FAT-fs (loop5): Can't find a valid FAT filesystem [ 407.684503][ T2743] loop1: detected capacity change from 0 to 1 [ 407.745470][ T2743] loop1: p2 p3 p4 [ 407.753170][ T2743] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 407.761584][ T2743] loop1: p3 start 225 is beyond EOD, truncated [ 407.767798][ T2743] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 407.832305][ T1032] loop1: p2 p3 p4 [ 407.836190][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 407.844003][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 407.850341][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:34 executing program 2 (fault-call:8 fault-nth:33): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xedc0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617448040001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:34 executing program 3: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x2f) ftruncate(r0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) fallocate(r0, 0x1, 0x0, 0x28120001) 09:48:34 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03900080000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xff0f, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 408.014652][ T2812] loop1: detected capacity change from 0 to 1 [ 408.020979][ T2809] loop5: detected capacity change from 0 to 6 [ 408.028924][ T2809] FAT-fs (loop5): bogus logical sector size 1096 [ 408.034856][ T2811] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 408.035307][ T2809] FAT-fs (loop5): Can't find a valid FAT filesystem [ 408.043274][ T2811] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 09:48:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e6661744c040001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 408.077272][ T2811] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 408.085399][ T2811] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 408.100082][ T2812] loop1: p2 p3 p4 [ 408.118756][ T2812] loop1: p2 size 1073872896 extends beyond EOD, truncated 09:48:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x40000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:34 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000000)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000000)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:dhcpd_unit_file_t:s0\x00', 0x27) close(r0) r2 = socket$inet(0x2, 0x3, 0x3) sendmmsg$inet(r2, &(0x7f0000005980)=[{{&(0x7f0000000180)={0x2, 0x0, @local}, 0x10, 0x0}}, {{&(0x7f0000001940)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@ip_tos_int={{0x14}}, @ip_retopts={{0xf, 0x0, 0x7, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x3}]}}}], 0x30}}], 0x2, 0x0) [ 408.136543][ T2812] loop1: p3 start 225 is beyond EOD, truncated [ 408.142772][ T2812] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 408.185532][ T2818] FAULT_INJECTION: forcing a failure. [ 408.185532][ T2818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.198666][ T2818] CPU: 0 PID: 2818 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 408.208767][ T2818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.219346][ T2818] Call Trace: [ 408.222626][ T2818] dump_stack+0x137/0x19d [ 408.226964][ T2818] should_fail+0x23c/0x250 [ 408.231395][ T2818] should_fail_usercopy+0x16/0x20 [ 408.236420][ T2818] _copy_to_iter+0x17c/0xdd0 [ 408.241080][ T2818] ? check_stack_object+0x61/0x70 [ 408.246117][ T2818] ? __virt_addr_valid+0x15a/0x1a0 [ 408.251245][ T2818] ? __check_object_size+0x253/0x310 [ 408.256602][ T2818] simple_copy_to_iter+0x4c/0x60 [ 408.261563][ T2818] ? skb_copy_datagram_iter+0xc0/0xc0 [ 408.266939][ T2818] __skb_datagram_iter+0xac/0x520 [ 408.272044][ T2818] ? ___cache_free+0x3c/0x300 [ 408.276752][ T2818] ? kfree+0xf0/0x1d0 [ 408.280890][ T2818] ? __kfree_skb+0xfe/0x150 [ 408.285442][ T2818] skb_copy_datagram_iter+0x39/0xc0 [ 408.290698][ T2818] unix_stream_read_actor+0x40/0x60 [ 408.296075][ T2818] unix_stream_read_generic+0x691/0x1260 [ 408.301727][ T2818] ? init_wait_entry+0x30/0x30 [ 408.306492][ T2818] unix_stream_recvmsg+0x63/0x90 [ 408.311459][ T2818] ? init_peercred+0x180/0x180 [ 408.316237][ T2818] ? unix_stream_sendmsg+0xa90/0xa90 [ 408.321573][ T2818] ____sys_recvmsg+0x15d/0x310 [ 408.326403][ T2818] ? __import_iovec+0x1ff/0x270 [ 408.331282][ T2818] ? import_iovec+0x69/0x80 [ 408.335907][ T2818] do_recvmmsg+0x34c/0x9e0 [ 408.340406][ T2818] ? do_anonymous_page+0x411/0x8b0 [ 408.345863][ T2818] ? fsnotify_perm+0x59/0x2e0 [ 408.350543][ T2818] ? __fsnotify_parent+0x32f/0x430 [ 408.355701][ T2818] ? __fget_light+0x21b/0x260 [ 408.360389][ T2818] ? __cond_resched+0x11/0x40 [ 408.365076][ T2818] __x64_sys_recvmmsg+0xcf/0x150 [ 408.370026][ T2818] ? exit_to_user_mode_prepare+0x65/0x190 [ 408.375803][ T2818] do_syscall_64+0x4a/0x90 [ 408.380652][ T2818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 408.386613][ T2818] RIP: 0033:0x4665d9 [ 408.390540][ T2818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 408.410152][ T2818] RSP: 002b:00007f269420c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 408.418591][ T2818] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 408.426563][ T2818] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 09:48:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xe0000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:34 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03c00080000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 408.434614][ T2818] RBP: 00007f269420c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 408.442685][ T2818] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 408.450861][ T2818] R13: 00007fff05d995ff R14: 00007f269420c300 R15: 0000000000022000 [ 408.503470][ T2847] loop5: detected capacity change from 0 to 6 [ 408.512478][ T2854] loop1: detected capacity change from 0 to 1 [ 408.527489][ T2847] FAT-fs (loop5): bogus logical sector size 1100 [ 408.530962][ T2854] loop1: p2 p3 p4 [ 408.534005][ T2847] FAT-fs (loop5): Can't find a valid FAT filesystem [ 408.537838][ T2854] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 408.552088][ T2854] loop1: p3 start 225 is beyond EOD, truncated [ 408.558253][ T2854] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 408.602512][ T2847] loop5: detected capacity change from 0 to 6 [ 408.611378][ T2847] FAT-fs (loop5): bogus logical sector size 1100 [ 408.617815][ T2847] FAT-fs (loop5): Can't find a valid FAT filesystem [ 408.619205][ T2854] loop1: detected capacity change from 0 to 1 [ 408.660954][ T2854] loop1: p2 p3 p4 [ 408.664797][ T2854] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 408.673907][ T2854] loop1: p3 start 225 is beyond EOD, truncated [ 408.680142][ T2854] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:35 executing program 2 (fault-call:8 fault-nth:34): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x1fffff, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000001440)={[{@resuid}, {@sb}]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) 09:48:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617460040001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:35 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03fe0080000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xe0ffff, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 408.876686][ T2885] loop1: detected capacity change from 0 to 1 [ 408.889371][ T2886] loop5: detected capacity change from 0 to 6 [ 408.906742][ T2895] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 408.915020][ T2895] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 408.931841][ T2885] loop1: p2 p3 p4 [ 408.935246][ T2886] FAT-fs (loop5): bogus logical sector size 1120 [ 408.935716][ T2885] loop1: p2 size 1073872896 extends beyond EOD, [ 408.942101][ T2886] FAT-fs (loop5): Can't find a valid FAT filesystem [ 408.942109][ T2885] truncated [ 408.945765][ T2895] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 408.965927][ T2885] loop1: p3 start 225 is beyond EOD, truncated 09:48:35 executing program 3: write$evdev(0xffffffffffffffff, &(0x7f00000001c0)=[{{}, 0x14}], 0x18) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x8, &(0x7f00000010c0)="6b56fd43ff14c550"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r4) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x5) tkill(r5, 0x34) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) r6 = getegid() r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000000080)="66c736eb00464a6c59aff1656f88bd45c17487a07e05", 0x16}, {&(0x7f0000000200)="85c83d602fc4ca87b512aecd581cd2f56126fcb64aaa30bc25e21677be3ade2ee7694fa3d992a38adbea6287c91d975801df221aa6ec743ea268935462bf58d54448339383ef40851bceaf4a75e04feba45f3c8ff0cdef2cc23b89d7c3154bf7907185eaf2632451aeb9cd3dc7f450081def8efcb22c2771ad8a3eaf43e504d83e7569cd2e8812cc71fbd15627be40a2154c9729bd566ff57c8cb65cd05902e10080665f84c11e2f35824a44109298b540af1a6f3ff713ff8413b68dc82475e44a6948cf6eb5bc981d6d4a51e987be3702c793eef7b15f45ca670418e25c21aec3d1bb5e5f3cba75c49e", 0xea}, {&(0x7f0000000300)="69043f000e1b93419270d5df00b479bbb280b1d73186da66b6ab0da3eec912319d306756960518567f0c2a5afe9a32b87b3dbade1ea679ec118821c37068f7c68a57a92aed25c3c89ec505523f1dfb", 0x4f}, {&(0x7f0000000380)="f799602b8b9fcc439f0ecc4677eefda43906227202d293ba3bed041575829aa24a585345da5fb74b4d2ac162855b5c253b88a38b3c3713d9d5b0cdf4a55b4ff0f197e30a443b5bcb5ee0b2252a7a77e4fb54ea255decf737ac7848972672c445dcb7064b13e49f95f5d18ceee7f8582e188ae055803429d3833b57f2d1f822e40bbeb98c318fe46ec86d90cf9e19f0ada205d59140f509e15419209b00567666564f", 0xa2}, {&(0x7f0000000180)="e835ca15f05d46d8cfa79ff087e48b909fb079b9a419e3b1db2397932cdc70c8e27bdea5263abebc25b62082c42d775bcfb59abbb4002c28", 0x38}], 0x6, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee00, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r8}}}], 0xa0, 0x2004c804}, 0xcb54e11da4e7a208) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 09:48:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x1000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 408.966358][ T2895] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 408.972539][ T2885] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 409.021530][ T2905] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 09:48:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x10e0000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:35 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x8e3) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000000)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000040), 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000400)={{r4}, "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"}) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/37, 0x25, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$CHAR_RAW_GETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) [ 409.029597][ T2905] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 409.054644][ T2886] loop5: detected capacity change from 0 to 6 09:48:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x2000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 409.085363][ T2886] FAT-fs (loop5): bogus logical sector size 1120 [ 409.091866][ T2886] FAT-fs (loop5): Can't find a valid FAT filesystem [ 409.098624][ T2885] loop1: detected capacity change from 0 to 1 [ 409.126208][ T2924] FAULT_INJECTION: forcing a failure. [ 409.126208][ T2924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.139321][ T2924] CPU: 0 PID: 2924 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 409.149559][ T2924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.159792][ T2924] Call Trace: [ 409.163075][ T2924] dump_stack+0x137/0x19d [ 409.167609][ T2924] should_fail+0x23c/0x250 [ 409.172114][ T2924] should_fail_usercopy+0x16/0x20 [ 409.177180][ T2924] _copy_to_iter+0x17c/0xdd0 [ 409.181780][ T2924] ? finish_task_switch+0xce/0x290 [ 409.187019][ T2924] ? check_stack_object+0x61/0x70 [ 409.192090][ T2924] ? __virt_addr_valid+0x15a/0x1a0 [ 409.197282][ T2924] ? __check_object_size+0x253/0x310 [ 409.202573][ T2924] simple_copy_to_iter+0x4c/0x60 [ 409.207515][ T2924] __skb_datagram_iter+0x23c/0x520 [ 409.212627][ T2924] ? skb_copy_datagram_iter+0xc0/0xc0 [ 409.218525][ T2924] skb_copy_datagram_iter+0x39/0xc0 [ 409.223785][ T2924] unix_stream_read_actor+0x40/0x60 [ 409.229121][ T2924] unix_stream_read_generic+0x691/0x1260 [ 409.234807][ T2924] unix_stream_recvmsg+0x63/0x90 [ 409.239879][ T2924] ? init_peercred+0x180/0x180 [ 409.244663][ T2924] ? unix_stream_sendmsg+0xa90/0xa90 [ 409.250165][ T2924] ____sys_recvmsg+0x15d/0x310 [ 409.254953][ T2924] ? __import_iovec+0x1ff/0x270 [ 409.259838][ T2924] ? import_iovec+0x69/0x80 [ 409.264593][ T2924] do_recvmmsg+0x34c/0x9e0 [ 409.269046][ T2924] ? do_anonymous_page+0x411/0x8b0 [ 409.274187][ T2924] ? fsnotify_perm+0x59/0x2e0 [ 409.279017][ T2924] ? __fsnotify_parent+0x32f/0x430 [ 409.284247][ T2924] ? __fget_light+0x21b/0x260 [ 409.289004][ T2924] ? __cond_resched+0x11/0x40 [ 409.293681][ T2924] __x64_sys_recvmmsg+0xcf/0x150 [ 409.298622][ T2924] ? exit_to_user_mode_prepare+0x65/0x190 [ 409.304402][ T2924] do_syscall_64+0x4a/0x90 [ 409.308889][ T2924] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 409.314791][ T2924] RIP: 0033:0x4665d9 [ 409.318687][ T2924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 409.338410][ T2924] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 409.346837][ T2924] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 409.354926][ T2924] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 409.362910][ T2924] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 409.370890][ T2924] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 409.378859][ T2924] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 09:48:35 executing program 2 (fault-call:8 fault-nth:35): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x2040000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:35 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03040280000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617468040001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x3000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 409.766145][ T2938] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 409.774217][ T2938] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 409.774354][ T2942] loop1: detected capacity change from 0 to 1 [ 409.794359][ T2944] loop5: detected capacity change from 0 to 6 [ 409.805311][ T2938] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 09:48:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e6661746c040001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 409.805404][ T2944] FAT-fs (loop5): bogus logical sector size 1128 [ 409.813457][ T2938] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 409.819927][ T2944] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x4000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 409.860832][ T2942] loop1: p2 p3 p4 [ 409.866751][ T2942] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 409.881765][ T2942] loop1: p3 start 225 is beyond EOD, truncated [ 409.888016][ T2942] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617474040001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 409.910483][ T2958] loop5: detected capacity change from 0 to 6 [ 409.920694][ T2958] FAT-fs (loop5): bogus logical sector size 1132 [ 409.927073][ T2958] FAT-fs (loop5): Can't find a valid FAT filesystem [ 409.956488][ T2966] FAULT_INJECTION: forcing a failure. [ 409.956488][ T2966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.969686][ T2966] CPU: 1 PID: 2966 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 409.979784][ T2966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.989961][ T2966] Call Trace: [ 409.993247][ T2966] dump_stack+0x137/0x19d [ 409.997595][ T2966] should_fail+0x23c/0x250 [ 410.002062][ T2966] should_fail_usercopy+0x16/0x20 [ 410.007099][ T2966] _copy_to_iter+0x17c/0xdd0 [ 410.011690][ T2966] ? finish_task_switch+0xce/0x290 [ 410.016879][ T2966] ? check_stack_object+0x61/0x70 [ 410.022030][ T2966] ? __virt_addr_valid+0x15a/0x1a0 [ 410.027189][ T2966] ? __check_object_size+0x253/0x310 [ 410.032540][ T2966] simple_copy_to_iter+0x4c/0x60 [ 410.037574][ T2966] ? skb_copy_datagram_iter+0xc0/0xc0 [ 410.042952][ T2966] __skb_datagram_iter+0xac/0x520 [ 410.047980][ T2966] ? ___cache_free+0x3c/0x300 [ 410.052690][ T2966] ? kfree+0xf0/0x1d0 [ 410.056776][ T2966] ? __kfree_skb+0xfe/0x150 [ 410.061343][ T2966] skb_copy_datagram_iter+0x39/0xc0 [ 410.066644][ T2966] unix_stream_read_actor+0x40/0x60 [ 410.071881][ T2966] unix_stream_read_generic+0x691/0x1260 [ 410.077546][ T2966] unix_stream_recvmsg+0x63/0x90 [ 410.082670][ T2966] ? init_peercred+0x180/0x180 [ 410.087437][ T2966] ? unix_stream_sendmsg+0xa90/0xa90 [ 410.092859][ T2966] ____sys_recvmsg+0x15d/0x310 [ 410.097779][ T2966] ? __import_iovec+0x1ff/0x270 [ 410.102633][ T2966] ? import_iovec+0x69/0x80 [ 410.107154][ T2966] do_recvmmsg+0x34c/0x9e0 [ 410.111573][ T2966] ? do_anonymous_page+0x411/0x8b0 [ 410.116715][ T2966] ? fsnotify_perm+0x59/0x2e0 [ 410.121474][ T2966] ? __fsnotify_parent+0x32f/0x430 [ 410.126634][ T2966] ? __fget_light+0x21b/0x260 [ 410.131402][ T2966] ? __cond_resched+0x11/0x40 [ 410.136104][ T2966] __x64_sys_recvmmsg+0xcf/0x150 [ 410.141246][ T2966] ? exit_to_user_mode_prepare+0x65/0x190 [ 410.146991][ T2966] do_syscall_64+0x4a/0x90 [ 410.151439][ T2966] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 410.157342][ T2966] RIP: 0033:0x4665d9 [ 410.161329][ T2966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 410.180974][ T2966] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 410.189406][ T2966] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 410.197421][ T2966] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 09:48:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x5000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:36 executing program 3: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0xcc, 0xf, 0x3, 0x801, 0x70bd2a, 0x25dfdbfb, {0x3, 0x0, 0x2}, [@typed={0x8, 0x78, 0x0, 0x0, @u32=0x1}, @generic="cfb316f756fe68e111e6e3ce4ccaa9eb29f42f9686a8c24986d6ebb15761a554451d22a7f1f7fe33a94e419330da24781cf43123251f94134ffc711d9081f51f8315db07d85f5b488a06490ad2b49f9799d06ae626c85ee72ea613c4bd4c42bc41e2078768e0f76bedc8c877c2a3ff2b103c40301c3fffe5312493dc4f0a13dbae1dea0090a4f7d029d124033f89d78e33147e1e80218d23ec54ee058cd7b4b6a07358caae73c0", @typed={0x8, 0x7, 0x0, 0x0, @ipv4=@loopback}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000801}, 0x200088c0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000440)={[0x8]}, &(0x7f0000000480), &(0x7f0000000540)={0x0, 0x3938700}, 0x8) r0 = gettid() tkill(r0, 0xc) timer_create(0x3, &(0x7f0000000180)={0x0, 0x17, 0x4, @thr={&(0x7f0000000200)="35a0189b1c0640e61ddd5a20f15610f2620b7e01c3146663d2dd7417845f2032d75f3cf6bdc7ed709cae841cb2ea58ba07ae67852e942df38bb04a3edfca892743e89be5c4a9871b8fcb7170b78f4908a4dd06a916dab97e1f27406b16a52abbad6de383dd4018d0d694cd87c1abf839fb88707a75990d4a61a13399da10d7bb07f2ac365464945e7c4d12ed052d8fe5caba0d7427e029e93f072f20fad944ffc96a8407ac602273f399f5628a3ed53ff4cf03d16565d6c0fec740faa87cce8daca47b3be95c0b68a4e0f7ae2d92a257e2b42bba779d0122285077506e2cfcecd78076b9e694bf2d78a9031ea6243d0abcc76c6c288a690f", &(0x7f0000000500)="4297aee860213cdf689ede51d87a9fcd0d28726d51"}}, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0), 0x8) timer_create(0x2, &(0x7f0000000580)={0x0, 0x6, 0x1, @tid=r0}, &(0x7f00000005c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000600)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000640)) 09:48:36 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000380000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 410.205499][ T2966] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 410.213570][ T2966] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 410.221639][ T2966] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 410.282723][ T2970] loop5: detected capacity change from 0 to 6 [ 410.295033][ T2970] FAT-fs (loop5): bogus logical sector size 1140 [ 410.301559][ T2970] FAT-fs (loop5): Can't find a valid FAT filesystem [ 410.319429][ T2985] loop1: detected capacity change from 0 to 1 [ 410.366502][ T2985] loop1: p2 p3 p4 [ 410.370436][ T2985] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 410.379726][ T2985] loop1: p3 start 225 is beyond EOD, truncated [ 410.385978][ T2985] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 410.433649][ T2985] loop1: detected capacity change from 0 to 1 [ 410.471046][ T2985] loop1: p2 p3 p4 [ 410.475112][ T2985] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 410.483587][ T2985] loop1: p3 start 225 is beyond EOD, truncated [ 410.489768][ T2985] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:36 executing program 2 (fault-call:8 fault-nth:36): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x6000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e6661747a040001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:36 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03120380000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x15e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req={0x4, 0xd0, 0xffffffc1, 0x2}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80480, 0x0) r3 = dup2(r1, r0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "3c9e97f8220f04ef", "71ce51b7188afa7978627fc4db6580eff2fc79962be5e5cf88da569a8f4282de", "2c0ecb55", "18b05eb6bb5b3f6b"}, 0x38) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 09:48:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x6040000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 410.640301][ T3017] loop1: detected capacity change from 0 to 1 [ 410.646757][ T3016] loop5: detected capacity change from 0 to 6 [ 410.658381][ T3016] FAT-fs (loop5): bogus logical sector size 1146 [ 410.659204][ T3023] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 410.664793][ T3016] FAT-fs (loop5): Can't find a valid FAT filesystem [ 410.672793][ T3023] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 09:48:36 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200800, 0x8) syz_mount_image$vfat(0x0, 0x0, 0x8, 0x1, &(0x7f0000000680)=[{0x0, 0x0, 0x5}], 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1a) 09:48:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x7000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 410.708639][ T3023] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 410.716848][ T3023] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 410.733237][ T3017] loop1: p2 p3 p4 [ 410.738465][ T3017] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 410.747022][ T3017] loop1: p3 start 225 is beyond EOD, truncated 09:48:37 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="df0000001e00010a"], 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001b40)=[{{&(0x7f0000000100)=@qipcrtr, 0x80, &(0x7f0000000740)=[{&(0x7f0000000000)=""/9, 0x9}, {&(0x7f0000000280)=""/219, 0xdb}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f00000001c0)=""/54, 0x36}, {&(0x7f0000000440)=""/66, 0x42}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f00000004c0)=""/166, 0xa6}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000640)=""/243, 0xf3}], 0x9, &(0x7f0000000800)=""/162, 0xa2}, 0x1}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000008c0)=""/15, 0xf}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/192, 0xc0}, {&(0x7f00000019c0)=""/47, 0x2f}, {&(0x7f0000001a00)=""/92, 0x5c}], 0x5, &(0x7f0000001b00)=""/48, 0x30}, 0x1ff}], 0x2, 0x1, 0x0) socket(0x3, 0x3, 0xffff7106) [ 410.753389][ T3017] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 410.810734][ T3021] FAULT_INJECTION: forcing a failure. [ 410.810734][ T3021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.823869][ T3021] CPU: 0 PID: 3021 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 410.834043][ T3021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.844806][ T3021] Call Trace: [ 410.848095][ T3021] dump_stack+0x137/0x19d [ 410.852444][ T3021] should_fail+0x23c/0x250 [ 410.856973][ T3021] should_fail_usercopy+0x16/0x20 [ 410.862083][ T3021] _copy_to_iter+0x17c/0xdd0 [ 410.866707][ T3021] ? check_stack_object+0x61/0x70 [ 410.872316][ T3021] ? __virt_addr_valid+0x15a/0x1a0 [ 410.877462][ T3021] ? __check_object_size+0x253/0x310 [ 410.882762][ T3021] simple_copy_to_iter+0x4c/0x60 [ 410.887714][ T3021] __skb_datagram_iter+0x23c/0x520 [ 410.892924][ T3021] ? skb_copy_datagram_iter+0xc0/0xc0 [ 410.899208][ T3021] skb_copy_datagram_iter+0x39/0xc0 [ 410.904436][ T3021] unix_stream_read_actor+0x40/0x60 [ 410.909646][ T3021] unix_stream_read_generic+0x691/0x1260 [ 410.915331][ T3021] ? init_wait_entry+0x30/0x30 [ 410.920213][ T3021] unix_stream_recvmsg+0x63/0x90 [ 410.925183][ T3021] ? init_peercred+0x180/0x180 [ 410.930201][ T3021] ? unix_stream_sendmsg+0xa90/0xa90 [ 410.935595][ T3021] ____sys_recvmsg+0x15d/0x310 [ 410.940472][ T3021] ? __import_iovec+0x1ff/0x270 [ 410.945342][ T3021] ? import_iovec+0x69/0x80 [ 410.950120][ T3021] do_recvmmsg+0x34c/0x9e0 [ 410.954546][ T3021] ? do_anonymous_page+0x411/0x8b0 [ 410.959707][ T3021] ? fsnotify_perm+0x59/0x2e0 [ 410.964507][ T3021] ? __fsnotify_parent+0x32f/0x430 [ 410.969631][ T3021] ? __fget_light+0x21b/0x260 [ 410.974338][ T3021] ? __cond_resched+0x11/0x40 [ 410.979113][ T3021] __x64_sys_recvmmsg+0xcf/0x150 [ 410.984057][ T3021] ? exit_to_user_mode_prepare+0x65/0x190 [ 410.989786][ T3021] do_syscall_64+0x4a/0x90 [ 410.994213][ T3021] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 411.000125][ T3021] RIP: 0033:0x4665d9 [ 411.004028][ T3021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 411.023736][ T3021] RSP: 002b:00007f269420c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 411.032164][ T3021] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 411.040217][ T3021] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 411.048213][ T3021] RBP: 00007f269420c1d0 R08: 0000000000000000 R09: 0000000000000000 09:48:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:37 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03380380000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 411.056217][ T3021] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 411.064219][ T3021] R13: 00007fff05d995ff R14: 00007f269420c300 R15: 0000000000022000 [ 411.082977][ T3049] netlink: 195 bytes leftover after parsing attributes in process `syz-executor.3'. [ 411.115876][ T3059] loop1: detected capacity change from 0 to 1 [ 411.143583][ T3059] loop1: p2 p3 p4 [ 411.147827][ T3059] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 411.156139][ T3059] loop1: p3 start 225 is beyond EOD, truncated [ 411.163279][ T3059] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 411.191602][ T3059] loop1: detected capacity change from 0 to 1 [ 411.251031][ T3059] loop1: p2 p3 p4 [ 411.255105][ T3059] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 411.263391][ T3059] loop1: p3 start 225 is beyond EOD, truncated [ 411.269661][ T3059] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:37 executing program 2 (fault-call:8 fault-nth:37): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174ab040001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x9000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:37 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03020480000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xa000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 411.510763][ T3084] loop5: detected capacity change from 0 to 6 [ 411.519570][ T3084] FAT-fs (loop5): bogus logical sector size 1195 [ 411.525978][ T3084] FAT-fs (loop5): Can't find a valid FAT filesystem [ 411.534273][ T3091] loop1: detected capacity change from 0 to 1 [ 411.545359][ T3092] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 09:48:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xb000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xc000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 411.553705][ T3092] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 411.577216][ T3092] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 411.586051][ T3092] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 411.604082][ T3091] loop1: p2 p3 p4 09:48:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xd000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) sendmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002240)='9', 0x1}], 0x1}}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r1, &(0x7f0000000140)=""/30, 0x1e) getdents64(r1, &(0x7f0000000040)=""/41, 0x29) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) 09:48:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xe000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 411.608491][ T3091] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 411.611177][ T3084] loop5: detected capacity change from 0 to 6 [ 411.622313][ T3091] loop1: p3 start 225 is beyond EOD, truncated [ 411.628522][ T3091] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 411.629795][ T3084] FAT-fs (loop5): bogus logical sector size 1195 [ 411.642089][ T3084] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400050001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 411.697391][ T1032] loop1: p2 p3 p4 [ 411.701415][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 411.710685][ T3111] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 411.718697][ T3111] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 411.734561][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 411.735546][ T3123] FAULT_INJECTION: forcing a failure. [ 411.735546][ T3123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.740803][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 411.753851][ T3123] CPU: 1 PID: 3123 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 411.753879][ T3123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.781063][ T3123] Call Trace: [ 411.784377][ T3123] dump_stack+0x137/0x19d [ 411.788712][ T3123] should_fail+0x23c/0x250 [ 411.793138][ T3123] should_fail_usercopy+0x16/0x20 [ 411.798173][ T3123] _copy_to_iter+0x17c/0xdd0 [ 411.802953][ T3123] ? finish_task_switch+0xce/0x290 [ 411.808115][ T3123] ? check_stack_object+0x61/0x70 [ 411.813418][ T3123] ? __virt_addr_valid+0x15a/0x1a0 [ 411.818534][ T3123] ? __check_object_size+0x253/0x310 [ 411.823931][ T3123] simple_copy_to_iter+0x4c/0x60 [ 411.828879][ T3123] ? skb_copy_datagram_iter+0xc0/0xc0 [ 411.834330][ T3123] __skb_datagram_iter+0xac/0x520 [ 411.839357][ T3123] ? ___cache_free+0x3c/0x300 [ 411.844038][ T3123] ? kfree+0xf0/0x1d0 [ 411.848022][ T3123] ? __kfree_skb+0xfe/0x150 [ 411.852615][ T3123] skb_copy_datagram_iter+0x39/0xc0 [ 411.857874][ T3123] unix_stream_read_actor+0x40/0x60 [ 411.863158][ T3123] unix_stream_read_generic+0x691/0x1260 [ 411.868814][ T3123] unix_stream_recvmsg+0x63/0x90 [ 411.873765][ T3123] ? init_peercred+0x180/0x180 [ 411.878534][ T3123] ? unix_stream_sendmsg+0xa90/0xa90 [ 411.883911][ T3123] ____sys_recvmsg+0x15d/0x310 [ 411.888765][ T3123] ? __import_iovec+0x1ff/0x270 [ 411.893657][ T3123] ? import_iovec+0x69/0x80 [ 411.898181][ T3123] do_recvmmsg+0x34c/0x9e0 [ 411.902638][ T3123] ? do_anonymous_page+0x411/0x8b0 [ 411.907818][ T3123] ? fsnotify_perm+0x59/0x2e0 [ 411.912494][ T3123] ? __fsnotify_parent+0x32f/0x430 [ 411.917608][ T3123] ? __fget_light+0x21b/0x260 [ 411.922312][ T3123] ? __cond_resched+0x11/0x40 [ 411.927108][ T3123] __x64_sys_recvmmsg+0xcf/0x150 [ 411.932052][ T3123] ? exit_to_user_mode_prepare+0x65/0x190 [ 411.937894][ T3123] do_syscall_64+0x4a/0x90 [ 411.942490][ T3123] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 411.948403][ T3123] RIP: 0033:0x4665d9 [ 411.952358][ T3123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 411.972235][ T3123] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 411.980819][ T3123] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 411.988857][ T3123] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 411.996835][ T3123] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 412.005062][ T3123] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 412.013039][ T3123] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 412.041248][ T1032] loop1: p2 p3 p4 [ 412.050476][ T3133] loop5: detected capacity change from 0 to 6 [ 412.050532][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 412.051681][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 412.070016][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 412.073123][ T3133] FAT-fs (loop5): bogus logical sector size 1280 [ 412.083832][ T3133] FAT-fs (loop5): Can't find a valid FAT filesystem [ 412.144417][ T3133] loop5: detected capacity change from 0 to 6 [ 412.151306][ T3133] FAT-fs (loop5): bogus logical sector size 1280 [ 412.157678][ T3133] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:38 executing program 2 (fault-call:8 fault-nth:38): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xf000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:38 executing program 3: set_mempolicy(0x2, &(0x7f0000000000)=0x7, 0x7) set_mempolicy(0x2, &(0x7f0000000040), 0x100000001) unshare(0x4a060480) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) gettid() unshare(0x10980) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000000)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) mmap(&(0x7f00005d6000/0x4000)=nil, 0x4000, 0x11, 0x30, r3, 0x2cbfc000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, &(0x7f0000000380)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda;b\xa8\x1c^\xa6D\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\x8a\xae\xabd\x0ftp\x82\xae\x00\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb8\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xcd\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaa\x01\x00\x00\x00\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\x85\x1f\xdeeg\xe3J\x80\x16\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14\n-o\x9a\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQd\x88EU\xeb\b2\xc6?E\xfd\xfa\x81\x93\xa9\x83\x96\xfb\x93\xbb\"\xd2:7\xce\xe7\xc1\x19\xfa\\\xa9\xbf\x80\xc44\x98\x0e3\xc4~r\n\xdb\xd6\xb7?yu\x8a\xe9\xfan)\xe8Qv\x16y\xf4\xa0\xe5\xed&;\x88\xfe\xcdK\x9cX\xfd;\xb2Q\x04\xfd\v\xfe\xa1m\xd4\xe8\xcc\x9c\xb7\xb1\x1fc\xabT\xebnw\x84\xa8g\xb5\x91&\x10M\xd9\x1b\x0e?{\awz\xad\xd7\x81A{h\xe3\x80!\x90\xef\x89\xae2qOp\xf8\xa5?K(\x89\xc5\xf9\x0f2\x11\xef>\xfb\xfcU6A{<|\xa2\xb263_\xf4\x8c\xf0\x15\x1a*G\xa9\x1e\nC\xba\xfe\x9dp\xe4\x18\xc0a') 09:48:38 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03060480000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400060001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x10000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x11000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 412.423510][ T3157] loop1: detected capacity change from 0 to 1 [ 412.440077][ T3162] loop5: detected capacity change from 0 to 6 [ 412.451861][ T3167] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 412.459957][ T3167] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 09:48:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x2, 0x7fffffff) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r1) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000028000/0x1000)=nil, 0x1000, 0x2000004, 0x30, r0, 0x8000000) syz_io_uring_complete(r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r2, 0xb07, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 09:48:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x12000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 412.475247][ T3167] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 412.483285][ T3167] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 412.507092][ T3157] loop1: p2 p3 p4 [ 412.510884][ T3162] FAT-fs (loop5): bogus logical sector size 1536 [ 412.517221][ T3162] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:38 executing program 3: set_mempolicy(0x3, &(0x7f0000000080)=0x101, 0x8) r0 = fsmount(0xffffffffffffffff, 0x1, 0x8) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000280)={0x9, {{0xa, 0x4e20, 0x1, @loopback, 0xcaf6}}, 0x1, 0x4, [{{0xa, 0x0, 0xb114, @empty, 0x3}}, {{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}}, {{0xa, 0x4e21, 0x3, @private0, 0x644}}, {{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x29}}}]}, 0x290) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r1) add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000000240)='>', 0x1, r2) 09:48:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x13000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 412.526642][ T3157] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 412.538165][ T3186] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 412.541570][ T3157] loop1: p3 start 225 is beyond EOD, truncated [ 412.546199][ T3186] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 412.552372][ T3157] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 412.580458][ T3196] FAULT_INJECTION: forcing a failure. [ 412.580458][ T3196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.593780][ T3196] CPU: 0 PID: 3196 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 412.603864][ T3196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.613921][ T3196] Call Trace: [ 412.617197][ T3196] dump_stack+0x137/0x19d [ 412.621680][ T3196] should_fail+0x23c/0x250 [ 412.626108][ T3196] should_fail_usercopy+0x16/0x20 [ 412.631251][ T3196] _copy_to_iter+0x17c/0xdd0 [ 412.635955][ T3196] ? finish_task_switch+0xce/0x290 [ 412.641593][ T3196] ? check_stack_object+0x61/0x70 [ 412.646765][ T3196] ? __virt_addr_valid+0x15a/0x1a0 [ 412.652117][ T3196] ? __check_object_size+0x253/0x310 [ 412.657411][ T3196] simple_copy_to_iter+0x4c/0x60 [ 412.662365][ T3196] __skb_datagram_iter+0x23c/0x520 [ 412.667533][ T3196] ? skb_copy_datagram_iter+0xc0/0xc0 [ 412.673068][ T3196] skb_copy_datagram_iter+0x39/0xc0 [ 412.678298][ T3196] unix_stream_read_actor+0x40/0x60 [ 412.683513][ T3196] unix_stream_read_generic+0x691/0x1260 [ 412.689240][ T3196] unix_stream_recvmsg+0x63/0x90 [ 412.694187][ T3196] ? init_peercred+0x180/0x180 [ 412.698969][ T3196] ? unix_stream_sendmsg+0xa90/0xa90 [ 412.704283][ T3196] ____sys_recvmsg+0x15d/0x310 [ 412.709080][ T3196] ? __import_iovec+0x1ff/0x270 [ 412.714023][ T3196] ? import_iovec+0x69/0x80 [ 412.718526][ T3196] do_recvmmsg+0x34c/0x9e0 [ 412.722946][ T3196] ? do_anonymous_page+0x411/0x8b0 [ 412.728063][ T3196] ? fsnotify_perm+0x59/0x2e0 [ 412.732783][ T3196] ? __fsnotify_parent+0x32f/0x430 [ 412.737996][ T3196] ? __fget_light+0x21b/0x260 [ 412.742675][ T3196] ? __cond_resched+0x11/0x40 [ 412.747370][ T3196] __x64_sys_recvmmsg+0xcf/0x150 [ 412.752326][ T3196] ? exit_to_user_mode_prepare+0x65/0x190 [ 412.758131][ T3196] do_syscall_64+0x4a/0x90 [ 412.762644][ T3196] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 412.768601][ T3196] RIP: 0033:0x4665d9 [ 412.772518][ T3196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 412.792131][ T3196] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 412.800584][ T3196] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 412.808560][ T3196] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 412.817840][ T3196] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 412.825899][ T3196] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 412.833985][ T3196] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 412.879850][ T3162] loop5: detected capacity change from 0 to 6 [ 412.895872][ T3157] loop1: detected capacity change from 0 to 1 [ 412.898241][ T3162] FAT-fs (loop5): bogus logical sector size 1536 [ 412.908493][ T3162] FAT-fs (loop5): Can't find a valid FAT filesystem [ 412.923423][ T3157] loop1: p2 p3 p4 [ 412.929357][ T3157] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 412.937280][ T3157] loop1: p3 start 225 is beyond EOD, truncated [ 412.943542][ T3157] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 412.952297][ T1032] loop1: p2 p3 p4 [ 412.956141][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 412.964200][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 412.970370][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 413.002549][ T1032] loop1: p2 p3 p4 [ 413.006538][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 413.015526][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 413.021886][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:39 executing program 2 (fault-call:8 fault-nth:39): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x18000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:39 executing program 3: personality(0x400000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/145, 0x91}, {&(0x7f0000002340)=""/102400, 0x19000}, {&(0x7f0000000140)=""/76, 0x4c}, {&(0x7f00000002c0)=""/76, 0x4c}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x7, 0x3, 0x7) io_setup(0x7fff, &(0x7f0000000040)) r1 = socket(0x11, 0x800000003, 0x0) fallocate(r1, 0x62, 0x3, 0x80000000) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = dup2(r1, r1) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@empty, @private0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x27, 0x200, 0x100, 0x400, 0x8, 0x24c0006, r3}) 09:48:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400070001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:39 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03800480000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x19000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 413.269618][ T3237] loop1: detected capacity change from 0 to 1 [ 413.276036][ T3239] loop5: detected capacity change from 0 to 6 [ 413.286344][ T3239] FAT-fs (loop5): bogus logical sector size 1792 [ 413.292735][ T3239] FAT-fs (loop5): Can't find a valid FAT filesystem [ 413.305276][ T3247] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 09:48:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x20000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 413.313511][ T3247] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 413.328687][ T3247] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 413.336726][ T3247] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 413.336772][ T3237] loop1: p2 p3 p4 [ 413.358097][ T3237] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 413.367544][ T3237] loop1: p3 start 225 is beyond EOD, truncated [ 413.373878][ T3237] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 413.404430][ T3259] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 09:48:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x20100000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x22000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400090001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:39 executing program 3: r0 = syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file1\x00', 0x70e, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1f, 0x5, &(0x7f0000000700)=[{&(0x7f0000000380)="c337e6b7e6", 0x5, 0x101}, {&(0x7f0000000400)="6e072ebfaa47333567d930ebb5788db9e665579151f5de6fa9ee71a074af4ddb1c01dbc486888b4204557d4292ae6423f41930ef8ae527b2a55a3a6100b746d25003d33708abcc45edd76299bc16d1a69fa65db5ae45a3f7f5603c7858ce7aa9a436cab6ae44be776d8b64d3dd1f8973ccfe23774457ff57b369e9fba896fc62571b69a078a061d90ca155526331b04b08fa8fd866a8999471ef61efabde69726a4461fcb21b2baba18141c3de03e5", 0xaf}, {&(0x7f00000004c0)="7392638fcb008a2d7860f9f9152f99db9650b8446bebef9239ce5ba7065b9b754471bb", 0x23, 0x22f}, {&(0x7f0000000500)="e70fa3481b0c59194550624b2a75cef28b931c1e4c0fda71710e5e7517132431938bb41f62bb9068b3ccaa2bc7b3ef487738396260e42c68489d70c4e7580a2cfd5def42f7", 0x45, 0x34}, {&(0x7f0000000600)="e13d1776bfda0c48aeebddfa4ed24654f540a30cbed455fbec8bd1b711da3e59ca2326d69de6e93fd760b1b452cfcf0bb215b8707ddf4146d753a7b9b72b701c1ae1c14af2e34b57d02f2934d87e49c6e01a3631bcd10a85a8098e9c33f586", 0x5f, 0x731}], 0x4, &(0x7f0000000680)={[{@abort}, {@block_validity}, {@min_batch_time}, {@noacl}, {@bsdgroups}]}) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x400080, 0x49) setxattr$security_capability(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0), &(0x7f00000002c0)=@v3={0x3000000, [{0xfffffffc, 0x6}, {0x6, 0x200}], r2}, 0x18, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) openat(r0, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x23) [ 413.412588][ T3259] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 413.430490][ T3259] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 413.438697][ T3259] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 413.464360][ T3237] loop1: detected capacity change from 0 to 1 [ 413.478962][ T3249] FAULT_INJECTION: forcing a failure. [ 413.478962][ T3249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.492441][ T3249] CPU: 0 PID: 3249 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 413.502542][ T3249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.512764][ T3249] Call Trace: [ 413.516049][ T3249] dump_stack+0x137/0x19d [ 413.520601][ T3249] should_fail+0x23c/0x250 [ 413.525094][ T3249] should_fail_usercopy+0x16/0x20 [ 413.530133][ T3249] _copy_to_iter+0x17c/0xdd0 [ 413.534848][ T3249] ? check_stack_object+0x61/0x70 [ 413.539943][ T3249] ? __virt_addr_valid+0x15a/0x1a0 [ 413.545153][ T3249] ? __check_object_size+0x253/0x310 [ 413.550552][ T3249] simple_copy_to_iter+0x4c/0x60 [ 413.555846][ T3249] ? skb_copy_datagram_iter+0xc0/0xc0 [ 413.561697][ T3249] __skb_datagram_iter+0xac/0x520 [ 413.567004][ T3249] ? ___cache_free+0x3c/0x300 [ 413.571915][ T3249] ? kfree+0xf0/0x1d0 [ 413.576175][ T3249] ? __kfree_skb+0xfe/0x150 [ 413.580666][ T3249] skb_copy_datagram_iter+0x39/0xc0 [ 413.585887][ T3249] unix_stream_read_actor+0x40/0x60 [ 413.591271][ T3249] unix_stream_read_generic+0x691/0x1260 [ 413.597038][ T3249] ? init_wait_entry+0x30/0x30 [ 413.601812][ T3249] unix_stream_recvmsg+0x63/0x90 [ 413.606751][ T3249] ? init_peercred+0x180/0x180 [ 413.611618][ T3249] ? unix_stream_sendmsg+0xa90/0xa90 [ 413.617121][ T3249] ____sys_recvmsg+0x15d/0x310 [ 413.622046][ T3249] ? __import_iovec+0x1ff/0x270 [ 413.626945][ T3249] ? import_iovec+0x69/0x80 [ 413.631440][ T3249] do_recvmmsg+0x34c/0x9e0 [ 413.635934][ T3249] ? do_anonymous_page+0x411/0x8b0 [ 413.641104][ T3249] ? fsnotify_perm+0x59/0x2e0 [ 413.646139][ T3249] ? __fsnotify_parent+0x32f/0x430 [ 413.651437][ T3249] ? __fget_light+0x21b/0x260 [ 413.656213][ T3249] ? __cond_resched+0x11/0x40 [ 413.660882][ T3249] __x64_sys_recvmmsg+0xcf/0x150 [ 413.665831][ T3249] ? exit_to_user_mode_prepare+0x65/0x190 [ 413.671596][ T3249] do_syscall_64+0x4a/0x90 [ 413.676103][ T3249] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 413.682059][ T3249] RIP: 0033:0x4665d9 [ 413.686018][ T3249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 413.705809][ T3249] RSP: 002b:00007f269420c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 413.714273][ T3249] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 413.722230][ T3249] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 413.730193][ T3249] RBP: 00007f269420c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 413.738159][ T3249] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 413.746267][ T3249] R13: 00007fff05d995ff R14: 00007f269420c300 R15: 0000000000022000 [ 413.780924][ T1032] loop1: p2 p3 p4 [ 413.781459][ T3278] loop5: detected capacity change from 0 to 6 [ 413.784863][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 413.792570][ T3278] FAT-fs (loop5): bogus logical sector size 2304 [ 413.799323][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 413.804367][ T3278] FAT-fs (loop5): Can't find a valid FAT filesystem [ 413.810542][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 413.825558][ T3237] loop1: p2 p3 p4 [ 413.829404][ T3237] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 413.837275][ T3237] loop1: p3 start 225 is beyond EOD, truncated [ 413.843500][ T3237] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 413.856570][ T3278] loop5: detected capacity change from 0 to 6 [ 413.863390][ T3278] FAT-fs (loop5): bogus logical sector size 2304 [ 413.869752][ T3278] FAT-fs (loop5): Can't find a valid FAT filesystem [ 413.891588][ T1032] loop1: p2 p3 p4 [ 413.895392][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 413.903698][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 413.909949][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:40 executing program 2 (fault-call:8 fault-nth:40): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x24020000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:40 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x42c000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r1, &(0x7f0000000280), 0x0, 0xd9f, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000080)={0x1, 0x5}) r2 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x10000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x3f7, 0x2, 0x70bd25, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0xf, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000000a0000002500000004001400040037000200000000000006040000000000000000", 0x39}], 0x1) 09:48:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000a0001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:40 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03f50480000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 414.158745][ T3315] loop5: detected capacity change from 0 to 6 [ 414.174733][ T3315] FAT-fs (loop5): bogus logical sector size 2560 [ 414.175979][ T3320] loop1: detected capacity change from 0 to 1 [ 414.181217][ T3315] FAT-fs (loop5): Can't find a valid FAT filesystem [ 414.197999][ T3321] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 09:48:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x25000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 414.198743][ T3324] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. [ 414.206134][ T3321] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 414.206947][ T3321] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 414.234800][ T3321] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 09:48:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x28020000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 414.247045][ T3324] A link change request failed with some changes committed already. Interface Y­4`Ò˜ may have been left with an inconsistent configuration, please check. [ 414.267792][ T3320] loop1: p2 p3 p4 [ 414.274995][ T3320] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 414.288841][ T3320] loop1: p3 start 225 is beyond EOD, truncated [ 414.295043][ T3320] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_pts(r0, 0x10000) mremap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffa000/0x1000)=nil) madvise(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x12) 09:48:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x29020000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 414.297462][ T3332] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 414.310402][ T3332] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 414.335305][ T3344] FAULT_INJECTION: forcing a failure. [ 414.335305][ T3344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.348545][ T3344] CPU: 0 PID: 3344 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 414.358633][ T3344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.368737][ T3344] Call Trace: [ 414.372033][ T3344] dump_stack+0x137/0x19d [ 414.376648][ T3344] should_fail+0x23c/0x250 [ 414.381107][ T3344] should_fail_usercopy+0x16/0x20 [ 414.386138][ T3344] _copy_to_iter+0x17c/0xdd0 [ 414.390800][ T3344] ? finish_task_switch+0xce/0x290 [ 414.396101][ T3344] ? check_stack_object+0x61/0x70 [ 414.401210][ T3344] ? __virt_addr_valid+0x15a/0x1a0 [ 414.406383][ T3344] ? __check_object_size+0x253/0x310 [ 414.411685][ T3344] simple_copy_to_iter+0x4c/0x60 [ 414.416635][ T3344] __skb_datagram_iter+0x23c/0x520 [ 414.421777][ T3344] ? skb_copy_datagram_iter+0xc0/0xc0 [ 414.427294][ T3344] skb_copy_datagram_iter+0x39/0xc0 [ 414.432603][ T3344] unix_stream_read_actor+0x40/0x60 [ 414.437822][ T3344] unix_stream_read_generic+0x691/0x1260 [ 414.443459][ T3344] unix_stream_recvmsg+0x63/0x90 [ 414.448410][ T3344] ? init_peercred+0x180/0x180 [ 414.453171][ T3344] ? unix_stream_sendmsg+0xa90/0xa90 [ 414.458554][ T3344] ____sys_recvmsg+0x15d/0x310 [ 414.463322][ T3344] ? __import_iovec+0x1ff/0x270 [ 414.468191][ T3344] ? import_iovec+0x69/0x80 [ 414.472697][ T3344] do_recvmmsg+0x34c/0x9e0 [ 414.477186][ T3344] ? __fsnotify_parent+0x32f/0x430 [ 414.482310][ T3344] ? __fget_light+0x21b/0x260 [ 414.487030][ T3344] ? __cond_resched+0x11/0x40 [ 414.491704][ T3344] __x64_sys_recvmmsg+0xcf/0x150 [ 414.496771][ T3344] ? exit_to_user_mode_prepare+0x65/0x190 [ 414.502498][ T3344] do_syscall_64+0x4a/0x90 [ 414.507160][ T3344] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 414.513135][ T3344] RIP: 0033:0x4665d9 [ 414.517037][ T3344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 414.536659][ T3344] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 414.545498][ T3344] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 414.553700][ T3344] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 414.561694][ T3344] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 414.569791][ T3344] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 414.578217][ T3344] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 09:48:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x3f000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:40 executing program 3: setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000)={0x73, @multicast1, 0x4e24, 0x0, 'lblcr\x00', 0x4, 0x78, 0x72}, 0x2c) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000180)="584076455cf6e8b50ba205ea78c877e23da02f3c5db3e2b227138bd73104b0cbad5ed2c4ea55b880c9d94e3ae8a07c4dc63ca33b0a217b18f30bce0c7528c0c00f4f1138a4f78cd2b625c272d4708af8df558ad19f49cd242bdbc1440716de864954953a8e076cfa0bf0d5b13f6e35c17bdcaa724ce617097a16303e8f524a023eb6c3c7197a209c65f15fac4019e037385b60ebc3e645327660f0edd3ffcc5d9d34958a2cb8e5bc93eba7472b390ed7ad7ddc3c", 0xb4) fcntl$setstatus(r0, 0x4, 0x46802) r2 = memfd_create(&(0x7f0000000940)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QUw!j\x91\x0eW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1\xb04A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf\x8b\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c\x83\xe7\ng\x87\xd930x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x79000000, 0x0, 0x5, 0x0, r0, &(0x7f0000000240)="23f83958df1748b7a17bca101bc7193e829cc84d05e2279f9d2957e526441661e323414546972712d7953d11aa6df27320d8c116df8ce9412302453528c9866c23f9c039955a8e5455a49b86c9af81d7c1ad1ef1f4433b4d4384da9c42532e2396f76f83425512ee70252bfc3f4a6bee15d19707915e5a50590dceddfc4f35111fa1b4f6cabf7d47546c61d00cbba1946e10e2ddd11589ae4b1804da2d4522752b650abbdf", 0xa5, 0xffffffffffffffff}]) [ 414.619273][ T3320] loop1: detected capacity change from 0 to 1 [ 414.677573][ T3320] loop1: p2 p3 p4 [ 414.681929][ T3320] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 414.700963][ T3320] loop1: p3 start 225 is beyond EOD, truncated [ 414.707173][ T3320] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:41 executing program 2 (fault-call:8 fault-nth:41): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000b0001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x40000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:41 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000580000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x48000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 415.039348][ T3379] loop5: detected capacity change from 0 to 6 [ 415.048018][ T3379] FAT-fs (loop5): bogus logical sector size 2816 [ 415.053269][ T3383] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 415.054408][ T3379] FAT-fs (loop5): Can't find a valid FAT filesystem [ 415.062394][ T3383] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 415.082973][ T3382] loop1: detected capacity change from 0 to 1 09:48:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x5ad100, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000180)={0x0, @adiantum, 0x0, @desc1}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x13, r4, 0x8d294000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x12c) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0x4030582b, &(0x7f0000000080)) 09:48:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x4c000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 415.141100][ T3382] loop1: p2 p3 p4 [ 415.143411][ T3379] loop5: detected capacity change from 0 to 6 [ 415.148150][ T3382] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 415.155641][ T3383] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 415.167924][ T3383] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 415.173309][ T3382] loop1: p3 start 225 is beyond EOD, truncated 09:48:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000c0001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 415.187120][ T3382] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 415.190889][ T3379] FAT-fs (loop5): bogus logical sector size 2816 [ 415.201046][ T3379] FAT-fs (loop5): Can't find a valid FAT filesystem [ 415.227621][ T3404] FAULT_INJECTION: forcing a failure. [ 415.227621][ T3404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.240984][ T3404] CPU: 0 PID: 3404 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 415.251822][ T3404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.262232][ T3404] Call Trace: [ 415.265539][ T3404] dump_stack+0x137/0x19d [ 415.270838][ T3404] should_fail+0x23c/0x250 [ 415.275318][ T3404] should_fail_usercopy+0x16/0x20 [ 415.280383][ T3404] _copy_to_iter+0x17c/0xdd0 [ 415.284980][ T3404] ? check_stack_object+0x61/0x70 [ 415.290081][ T3404] ? __virt_addr_valid+0x15a/0x1a0 [ 415.295194][ T3404] ? __check_object_size+0x253/0x310 [ 415.300488][ T3404] simple_copy_to_iter+0x4c/0x60 [ 415.305443][ T3404] ? skb_copy_datagram_iter+0xc0/0xc0 [ 415.310821][ T3404] __skb_datagram_iter+0xac/0x520 [ 415.315977][ T3404] ? ___cache_free+0x3c/0x300 [ 415.320679][ T3404] ? kfree+0xf0/0x1d0 [ 415.324860][ T3404] ? __kfree_skb+0xfe/0x150 [ 415.329433][ T3404] skb_copy_datagram_iter+0x39/0xc0 [ 415.335776][ T3404] unix_stream_read_actor+0x40/0x60 [ 415.341009][ T3404] unix_stream_read_generic+0x691/0x1260 [ 415.346782][ T3404] ? init_wait_entry+0x30/0x30 [ 415.351556][ T3404] unix_stream_recvmsg+0x63/0x90 [ 415.356716][ T3404] ? init_peercred+0x180/0x180 [ 415.361639][ T3404] ? unix_stream_sendmsg+0xa90/0xa90 [ 415.366937][ T3404] ____sys_recvmsg+0x15d/0x310 [ 415.371707][ T3404] ? __import_iovec+0x1ff/0x270 [ 415.377138][ T3404] ? import_iovec+0x69/0x80 [ 415.381798][ T3404] do_recvmmsg+0x34c/0x9e0 [ 415.386448][ T3404] ? do_anonymous_page+0x411/0x8b0 [ 415.391649][ T3404] ? fsnotify_perm+0x59/0x2e0 [ 415.396363][ T3404] ? __fsnotify_parent+0x32f/0x430 [ 415.401548][ T3404] ? __fget_light+0x21b/0x260 [ 415.406409][ T3404] ? __cond_resched+0x11/0x40 [ 415.412169][ T3404] __x64_sys_recvmmsg+0xcf/0x150 [ 415.417168][ T3404] ? exit_to_user_mode_prepare+0x65/0x190 [ 415.423164][ T3404] do_syscall_64+0x4a/0x90 [ 415.427726][ T3404] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 415.433652][ T3404] RIP: 0033:0x4665d9 [ 415.437746][ T3404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 415.458120][ T3404] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 415.466648][ T3404] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 415.474737][ T3404] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 415.483257][ T3404] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 09:48:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x60000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 415.492739][ T3404] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 415.500831][ T3404] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 09:48:41 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(0x0, 0x0) [ 415.573532][ T3382] loop1: detected capacity change from 0 to 1 [ 415.579937][ T3412] loop5: detected capacity change from 0 to 6 [ 415.631072][ T3412] FAT-fs (loop5): bogus logical sector size 3072 [ 415.631188][ T3382] loop1: p2 p3 p4 [ 415.637472][ T3412] FAT-fs (loop5): Can't find a valid FAT filesystem [ 415.646931][ T3382] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 415.659792][ T3382] loop1: p3 start 225 is beyond EOD, truncated [ 415.669991][ T3382] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 415.709411][ T3412] loop5: detected capacity change from 0 to 6 [ 415.716383][ T3412] FAT-fs (loop5): bogus logical sector size 3072 [ 415.722851][ T3412] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:42 executing program 2 (fault-call:8 fault-nth:42): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x68000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) socketpair(0x7403d3323a2cf516, 0x80000, 0x1f, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x440, 0x10) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, 0x4, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x606d2556}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x28f50d8c}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'caif0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040804}, 0x4040005) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r3, &(0x7f0000000340)={r4, r1, 0x10000}) r5 = dup(r1) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000380)={r5, r1, 0x200}) openat(r5, &(0x7f00000003c0)='./file0\x00', 0x141000, 0x20) r6 = accept(r3, &(0x7f0000000440)=@nl, &(0x7f00000004c0)=0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000500)={0xfffffffffffffffd, {0x26, 0x5, 0xeacf, 0x2, 0x6}}) syz_io_uring_setup(0x603c, &(0x7f0000000540)={0x0, 0xc4bc, 0x0, 0x1, 0x3bf}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000800)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r4, 0x0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000640)=""/7, 0x7}], 0x1, &(0x7f00000006c0)=""/230, 0xe6}, 0x0, 0x80, 0x0, {0x2}}, 0x1ff) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r8 = syz_mount_image$nfs4(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x5, 0x8, &(0x7f0000001dc0)=[{&(0x7f00000008c0)="cae054777df18f25f171aa719e80c71cf40488badc31b21ab323c53e619aeface6b70ba7111c7e1641532a047e41aaeaf1b82d8b8c3ad8556143ae7fcc44b120c70b74b05c3085e5e45c1354a3137b6205b1aaced96a2832a3b70587923cdecfdeb0", 0x62, 0x3}, {&(0x7f0000000940)="840f91c3071b71a78aebf8125d902e9296aaeeaf79bb740a23cd576fbb9eed6092d13724c51a0027b45cd5f885a029798fddb96afabda0aa6712477a5efd2a1b72d600bbee5ad48786adecd39115f4d8b16fb544b1facf1509817ff1b6462c0290418133d3a815706208795fc6919d224a30f0581c6c0e00d13989500a1c1936a1660abbeacf709d211b5abcee455af3fe1e340af6554b01b7bec223a095f466ef1cb04d5a8d497bdee6f2dc845a174e1916d533715bb348741dfdcf10ed841a398b22f3b2b92796dabd1639eba710201838f7bc5e8f7d9902414740f55a709e3d5e4296c1667d4bfa5abecd37863ba5b729fe65bc51", 0xf6, 0x2}, {&(0x7f0000000a40)="f272ef806c1cc51edf13a7b694e4995de371f287a7dd05403b7aa714a575bd6238ca366a93f7d0e457e38cb3743e2e262a8867fd2a741f04525f86f97ff4ab380b215f1602d8336fbb2bbaf6d27b42e9d9e91a83d1ad98256eecace7ad3afdd8b6db0daaf67616080f09ddcfc881e6efe23994406064f11dffdd3def9d9bd7433641f02431b75dcf0f", 0x89, 0x14f90000}, {&(0x7f0000000b00)="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", 0x1000, 0x4650b76c}, {&(0x7f0000001b00)="0d89a74772da4f958de1b13d6cf724dfaf91259b216d72d5d427f2e5b9d015438288f56e67aad91342b36c1c93b4c3324b3c94e56f7f428ab904ff843f699ba9fb03175f850ed213b8e862c6a1cdcb0c458d06a4be059525665b7cd5301df76dd1e0d4463bb7e4963b1f6a5f0bf458e02e46e082ced14f7d4e8f9e28f17dff50921f80b99e2ab537e12a3760a761a87f2ef2c6b1e8bf50c4b1e6036f27439198b04719cc2f0b76c5b1ba6f0a9ebc7739d3ec5288bb7fe1dc600eec7f7bba9d7c45", 0xc1, 0x2}, {&(0x7f0000001c00)="ed07c1ca68168d5d0f36004e6e13f2b97cb01569fd373f3fbd172ff67cb9f2be0713424f9f38d0d86b24311f79f256a83dbba70d3f1dd79f6268d59c7398f1b2b582fb9b7996fbd1936e79928103c12b75ba8a6c12503761eb547fc113ffeb3ee80c7cf364b66f6775d3c856db5dc80516a81cd5f093d07653c48d9946df042ec023d1601cb8d4e0f146622411ebc6f31dffefea18c772e7b4440d20ab45a28c", 0xa0, 0x7}, {&(0x7f0000001cc0)="84e1fe5e04f2295518614a3dc8832e7d65e0563065398d2213956e742a10c14f8d931869", 0x24, 0x3}, {&(0x7f0000001d00)="5151cd3f078352c3cf868a59ffeb8061eefd95955365d1d4d69b37156aef57ac879ceb36e43f18b79bbd874efda6ff583dd6ca017bed83d1d5f9f2b2c3b5c2c4d9db10d77060c888aea95632b8be9bc6650c1d6417533784e897fda7e9daf9c0f28d3f95e52181da3d071d1bb2dfacb037dd1246e8ba21a73a07d3f42bebfcf09f0bcef3367930ec4f9e", 0x8a, 0x3f}], 0x1000000, &(0x7f0000001e80)={[{'.@'}, {'caif0\x00'}, {'/dev/vcsu\x00'}, {'ethtool\x00'}, {'/dev/vcsu\x00'}, {}, {'/dev/vcsu\x00'}, {}, {'caif0\x00'}], [{@appraise}, {@obj_type={'obj_type', 0x3d, 'geneve0\x00'}}, {@seclabel}, {@obj_type={'obj_type', 0x3d, 'syz1\x00'}}, {@audit}, {@audit}]}) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001f40), 0x40, 0x0) renameat(r8, &(0x7f0000001f00)='./file0\x00', r9, &(0x7f0000001f80)='./file0\x00') 09:48:42 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000680000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000d0001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x6b120000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 415.897743][ T3448] loop1: detected capacity change from 0 to 1 [ 415.910549][ T3454] loop5: detected capacity change from 0 to 6 09:48:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x6c000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:42 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f0000000280)=0x10000000000, 0x5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000052008106000000001409f7fe0a"], 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f00004e4000/0x4000)=nil, 0x4000}, &(0x7f00000001c0)=0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) syz_open_procfs(r6, &(0x7f0000000140)='attr/keycreate\x00') splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 415.947277][ T3448] loop1: p2 p3 p4 [ 415.951198][ T3454] FAT-fs (loop5): bogus logical sector size 3328 [ 415.957640][ T3454] FAT-fs (loop5): Can't find a valid FAT filesystem [ 415.971056][ T3448] loop1: p2 size 1073872896 extends beyond EOD, truncated 09:48:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 416.008082][ T3454] loop5: detected capacity change from 0 to 6 [ 416.023601][ T3454] FAT-fs (loop5): bogus logical sector size 3328 [ 416.030120][ T3454] FAT-fs (loop5): Can't find a valid FAT filesystem [ 416.037341][ T3448] loop1: p3 start 225 is beyond EOD, truncated [ 416.043879][ T3448] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x74000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 416.096769][ T3489] FAULT_INJECTION: forcing a failure. [ 416.096769][ T3489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.109885][ T3489] CPU: 1 PID: 3489 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 416.119973][ T3489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.130054][ T3489] Call Trace: [ 416.133365][ T3489] dump_stack+0x137/0x19d [ 416.137796][ T3489] should_fail+0x23c/0x250 [ 416.142218][ T3489] should_fail_usercopy+0x16/0x20 [ 416.147270][ T3489] _copy_to_iter+0x17c/0xdd0 [ 416.151925][ T3489] ? finish_task_switch+0xce/0x290 [ 416.157091][ T3489] ? check_stack_object+0x61/0x70 [ 416.162230][ T3489] ? __virt_addr_valid+0x15a/0x1a0 [ 416.167386][ T3489] ? __check_object_size+0x253/0x310 [ 416.172707][ T3489] simple_copy_to_iter+0x4c/0x60 [ 416.177648][ T3489] __skb_datagram_iter+0x23c/0x520 [ 416.182807][ T3489] ? skb_copy_datagram_iter+0xc0/0xc0 [ 416.189036][ T3489] skb_copy_datagram_iter+0x39/0xc0 [ 416.194313][ T3489] unix_stream_read_actor+0x40/0x60 [ 416.199517][ T3489] unix_stream_read_generic+0x691/0x1260 [ 416.205148][ T3489] ? init_wait_entry+0x30/0x30 [ 416.209907][ T3489] unix_stream_recvmsg+0x63/0x90 [ 416.214839][ T3489] ? init_peercred+0x180/0x180 [ 416.219595][ T3489] ? unix_stream_sendmsg+0xa90/0xa90 [ 416.224968][ T3489] ____sys_recvmsg+0x15d/0x310 [ 416.229755][ T3489] ? __import_iovec+0x1ff/0x270 [ 416.234783][ T3489] ? import_iovec+0x69/0x80 [ 416.239389][ T3489] do_recvmmsg+0x34c/0x9e0 [ 416.245278][ T3489] ? do_anonymous_page+0x411/0x8b0 [ 416.250417][ T3489] ? fsnotify_perm+0x59/0x2e0 [ 416.255094][ T3489] ? __fsnotify_parent+0x32f/0x430 [ 416.260382][ T3489] ? __fget_light+0x21b/0x260 [ 416.265045][ T3489] ? __cond_resched+0x11/0x40 [ 416.269727][ T3489] __x64_sys_recvmmsg+0xcf/0x150 [ 416.274680][ T3489] ? exit_to_user_mode_prepare+0x65/0x190 [ 416.280537][ T3489] do_syscall_64+0x4a/0x90 [ 416.284961][ T3489] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 416.290851][ T3489] RIP: 0033:0x4665d9 [ 416.294743][ T3489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 416.317648][ T3489] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 416.326189][ T3489] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 416.334207][ T3489] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 416.342185][ T3489] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 416.351464][ T3489] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 416.360213][ T3489] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 09:48:42 executing program 2 (fault-call:8 fault-nth:43): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:42 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03040680000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x78000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000e0001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 416.749918][ T3512] loop1: detected capacity change from 0 to 1 [ 416.759996][ T3511] loop5: detected capacity change from 0 to 6 [ 416.784567][ T3512] loop1: p2 p3 p4 [ 416.785185][ T3511] FAT-fs (loop5): bogus logical sector size 3584 09:48:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x7a000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 416.795489][ T3511] FAT-fs (loop5): Can't find a valid FAT filesystem [ 416.797731][ T3512] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 416.819757][ T3512] loop1: p3 start 225 is beyond EOD, truncated [ 416.826110][ T3512] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x83030000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:43 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r1 = signalfd4(r0, &(0x7f0000000140), 0x8, 0x80800) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280)) ftruncate(r2, 0x1) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x100, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x15a08, 0x8, 0x4, 0x7, 0x10000, 0x80, 0xe259, 0x0, 0x9, 0x0, 0x5}, 0x0, 0xe, r1, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) fork() 09:48:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x84030000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 416.861154][ T3511] loop5: detected capacity change from 0 to 6 [ 416.878023][ T3511] FAT-fs (loop5): bogus logical sector size 3584 [ 416.884431][ T3511] FAT-fs (loop5): Can't find a valid FAT filesystem [ 416.901180][ T3512] loop1: detected capacity change from 0 to 1 09:48:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 416.951113][ T3512] loop1: p2 p3 p4 [ 416.956304][ T3512] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 416.993599][ T3560] FAULT_INJECTION: forcing a failure. [ 416.993599][ T3560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.002331][ T3512] loop1: p3 start 225 is beyond EOD, truncated [ 417.006787][ T3560] CPU: 0 PID: 3560 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 417.012964][ T3512] loop1: p4 size 3657465856 extends beyond EOD, [ 417.023764][ T3560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.023779][ T3560] Call Trace: [ 417.023787][ T3560] dump_stack+0x137/0x19d [ 417.030109][ T3512] truncated [ 417.046631][ T1032] loop1: p2 p3 p4 [ 417.048033][ T3560] should_fail+0x23c/0x250 [ 417.051356][ T1032] loop1: p2 size 1073872896 extends beyond EOD, [ 417.054959][ T3560] should_fail_usercopy+0x16/0x20 [ 417.059399][ T1032] truncated [ 417.060123][ T1032] loop1: p3 start 225 is beyond EOD, [ 417.065891][ T3560] _copy_to_iter+0x17c/0xdd0 [ 417.065917][ T3560] ? finish_task_switch+0xce/0x290 [ 417.070941][ T1032] truncated [ 417.074021][ T3560] ? check_stack_object+0x61/0x70 [ 417.079427][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 417.109655][ T3560] ? __virt_addr_valid+0x15a/0x1a0 [ 417.114774][ T3560] ? __check_object_size+0x253/0x310 [ 417.120406][ T3560] simple_copy_to_iter+0x4c/0x60 [ 417.125365][ T3560] ? skb_copy_datagram_iter+0xc0/0xc0 [ 417.130793][ T3560] __skb_datagram_iter+0xac/0x520 [ 417.135819][ T3560] ? ___cache_free+0x3c/0x300 [ 417.140508][ T3560] ? kfree+0xf0/0x1d0 [ 417.144492][ T3560] ? __kfree_skb+0xfe/0x150 [ 417.150643][ T3560] skb_copy_datagram_iter+0x39/0xc0 [ 417.155945][ T3560] unix_stream_read_actor+0x40/0x60 [ 417.161142][ T3560] unix_stream_read_generic+0x691/0x1260 [ 417.166870][ T3560] ? asm_sysvec_call_function_single+0x12/0x20 [ 417.173154][ T3560] ? init_wait_entry+0x30/0x30 [ 417.178093][ T3560] unix_stream_recvmsg+0x63/0x90 [ 417.183370][ T3560] ? init_peercred+0x180/0x180 [ 417.188401][ T3560] ? unix_stream_sendmsg+0xa90/0xa90 [ 417.194268][ T3560] ____sys_recvmsg+0x15d/0x310 [ 417.199147][ T3560] ? __import_iovec+0x1ff/0x270 [ 417.203998][ T3560] ? import_iovec+0x69/0x80 [ 417.208594][ T3560] do_recvmmsg+0x34c/0x9e0 [ 417.212997][ T3560] ? do_anonymous_page+0x411/0x8b0 [ 417.218283][ T3560] ? fsnotify_perm+0x59/0x2e0 [ 417.222962][ T3560] ? __fsnotify_parent+0x32f/0x430 [ 417.228221][ T3560] ? __fget_light+0x21b/0x260 [ 417.232946][ T3560] ? __cond_resched+0x11/0x40 [ 417.237609][ T3560] __x64_sys_recvmmsg+0xcf/0x150 [ 417.242655][ T3560] ? exit_to_user_mode_prepare+0x65/0x190 [ 417.248437][ T3560] do_syscall_64+0x4a/0x90 [ 417.252865][ T3560] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 417.258781][ T3560] RIP: 0033:0x4665d9 [ 417.262686][ T3560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 417.283802][ T3560] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 417.292212][ T3560] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 417.300462][ T3560] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 417.308807][ T3560] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 417.316900][ T3560] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 417.324867][ T3560] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 09:48:43 executing program 2 (fault-call:8 fault-nth:44): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x85030000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400110001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x60152, r1, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x92010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x22c, &(0x7f0000000080)=' ', 0x1, 0x4}, 0x6) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x6deb, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "de4b32d04e176f7d27402e4dbc906dbf843ec7"}) 09:48:43 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000780000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x86030000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 417.628218][ T3579] loop1: detected capacity change from 0 to 1 [ 417.642415][ T3584] loop5: detected capacity change from 0 to 6 [ 417.653043][ T3579] loop1: p2 p3 p4 [ 417.656882][ T3579] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 417.670908][ T3584] FAT-fs (loop5): bogus logical sector size 4352 09:48:43 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x80240) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1080048, 0x0) [ 417.675341][ T3591] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 417.677272][ T3584] FAT-fs (loop5): Can't find a valid FAT filesystem [ 417.690019][ T3591] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 417.709482][ T3579] loop1: p3 start 225 is beyond EOD, truncated [ 417.715902][ T3579] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x87030000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400120001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 417.727541][ T3591] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 417.735707][ T3591] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 417.740988][ T3584] loop5: detected capacity change from 0 to 6 [ 417.757241][ T3584] FAT-fs (loop5): bogus logical sector size 4352 [ 417.763766][ T3584] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x220002, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) sendfile(r1, r0, 0x0, 0x7fffeffd) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = signalfd(r3, &(0x7f0000000100)={[0x7ff]}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x1, 0x2, 0x0, 0x2, 0x4, 0x7}, 0x20) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x4800) sendfile(r3, r5, 0x0, 0x8400fffffffa) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 417.810778][ T3579] loop1: detected capacity change from 0 to 1 [ 417.830934][ T3579] loop1: p2 p3 p4 [ 417.834975][ T3616] FAULT_INJECTION: forcing a failure. [ 417.834975][ T3616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.840260][ T3579] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 417.857098][ T3616] CPU: 1 PID: 3616 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 417.857128][ T3616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.864676][ T3579] loop1: p3 start 225 is beyond EOD, [ 417.874288][ T3616] Call Trace: [ 417.874299][ T3616] dump_stack+0x137/0x19d [ 417.874323][ T3616] should_fail+0x23c/0x250 [ 417.874341][ T3616] should_fail_usercopy+0x16/0x20 [ 417.884438][ T3579] truncated [ 417.889868][ T3616] _copy_to_iter+0x17c/0xdd0 [ 417.893258][ T3579] loop1: p4 size 3657465856 extends beyond EOD, [ 417.897643][ T3616] ? finish_task_switch+0xce/0x290 [ 417.902072][ T3579] truncated [ 417.907159][ T3616] ? check_stack_object+0x61/0x70 [ 417.934483][ T3616] ? __virt_addr_valid+0x15a/0x1a0 [ 417.939621][ T3616] ? __check_object_size+0x253/0x310 [ 417.945064][ T3616] simple_copy_to_iter+0x4c/0x60 [ 417.950099][ T3616] __skb_datagram_iter+0x23c/0x520 [ 417.956186][ T3616] ? skb_copy_datagram_iter+0xc0/0xc0 [ 417.961654][ T3616] skb_copy_datagram_iter+0x39/0xc0 [ 417.966857][ T3616] unix_stream_read_actor+0x40/0x60 [ 417.972268][ T3616] unix_stream_read_generic+0x691/0x1260 [ 417.977915][ T3616] unix_stream_recvmsg+0x63/0x90 [ 417.984310][ T3616] ? init_peercred+0x180/0x180 [ 417.989358][ T3616] ? unix_stream_sendmsg+0xa90/0xa90 [ 417.994721][ T3616] ____sys_recvmsg+0x15d/0x310 [ 417.999489][ T3616] ? __import_iovec+0x1ff/0x270 [ 418.004343][ T3616] ? import_iovec+0x69/0x80 [ 418.008854][ T3616] do_recvmmsg+0x34c/0x9e0 [ 418.013295][ T3616] ? do_anonymous_page+0x411/0x8b0 [ 418.018634][ T3616] ? fsnotify_perm+0x59/0x2e0 [ 418.023626][ T3616] ? __fsnotify_parent+0x32f/0x430 [ 418.028904][ T3616] ? __fget_light+0x21b/0x260 [ 418.034729][ T3616] ? __cond_resched+0x11/0x40 [ 418.039496][ T3616] __x64_sys_recvmmsg+0xcf/0x150 [ 418.044496][ T3616] ? exit_to_user_mode_prepare+0x65/0x190 [ 418.051267][ T3616] do_syscall_64+0x4a/0x90 [ 418.055724][ T3616] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 418.061888][ T3616] RIP: 0033:0x4665d9 [ 418.065790][ T3616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 418.085990][ T3616] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 418.095205][ T3616] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 418.103178][ T3616] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 09:48:44 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xf0280, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e006700141e9b070009040080", 0x11) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a", 0x5) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000002c0), &(0x7f0000000300)=0x4) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe3, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000000)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) mmap(&(0x7f000039c000/0x2000)=nil, 0x2000, 0x0, 0x1010, r4, 0x9d602000) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000100)=""/71, 0x47}, {&(0x7f0000000180)=""/98, 0x62}], 0x2, 0x3a8, 0x5) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x701a81, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8, 0x0) [ 418.111345][ T3616] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 418.119333][ T3616] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 418.127336][ T3616] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 418.179454][ T3621] loop5: detected capacity change from 0 to 6 [ 418.206114][ T3621] FAT-fs (loop5): bogus logical sector size 4608 [ 418.212520][ T3621] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x88030000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:44 executing program 2 (fault-call:8 fault-nth:45): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:44 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000980000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x89030000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 418.495440][ T3649] loop1: detected capacity change from 0 to 1 [ 418.502900][ T3652] loop5: detected capacity change from 0 to 6 [ 418.505311][ T3650] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 418.512111][ T3652] FAT-fs (loop5): bogus sectors per cluster 0 [ 418.517442][ T3650] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 418.523608][ T3652] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8a030000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 418.546829][ T3650] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 418.554886][ T3650] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 418.567565][ T3649] loop1: p2 p3 p4 [ 418.575600][ T3649] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 418.590995][ T3652] loop5: detected capacity change from 0 to 6 09:48:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8b030000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 418.591543][ T3649] loop1: p3 start 225 is beyond EOD, truncated [ 418.603547][ T3649] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 418.613364][ T3652] FAT-fs (loop5): bogus sectors per cluster 0 [ 418.619510][ T3652] FAT-fs (loop5): Can't find a valid FAT filesystem [ 418.647840][ T3670] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 418.656162][ T3670] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 418.683735][ T3655] FAULT_INJECTION: forcing a failure. [ 418.683735][ T3655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.696914][ T3655] CPU: 0 PID: 3655 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 418.706985][ T3655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.717075][ T3655] Call Trace: [ 418.720356][ T3655] dump_stack+0x137/0x19d [ 418.724819][ T3655] should_fail+0x23c/0x250 [ 418.729452][ T3655] should_fail_usercopy+0x16/0x20 [ 418.734502][ T3655] _copy_to_iter+0x17c/0xdd0 [ 418.739655][ T3655] ? check_stack_object+0x61/0x70 [ 418.744705][ T3655] ? __virt_addr_valid+0x15a/0x1a0 [ 418.749842][ T3655] ? __check_object_size+0x253/0x310 [ 418.756005][ T3655] simple_copy_to_iter+0x4c/0x60 [ 418.760994][ T3655] ? skb_copy_datagram_iter+0xc0/0xc0 [ 418.766932][ T3655] __skb_datagram_iter+0xac/0x520 [ 418.771971][ T3655] ? ___cache_free+0x3c/0x300 [ 418.776815][ T3655] ? kfree+0xf0/0x1d0 [ 418.780814][ T3655] ? __kfree_skb+0xfe/0x150 [ 418.785331][ T3655] skb_copy_datagram_iter+0x39/0xc0 [ 418.790534][ T3655] unix_stream_read_actor+0x40/0x60 [ 418.795758][ T3655] unix_stream_read_generic+0x691/0x1260 [ 418.801415][ T3655] ? init_wait_entry+0x30/0x30 [ 418.806275][ T3655] unix_stream_recvmsg+0x63/0x90 [ 418.811244][ T3655] ? init_peercred+0x180/0x180 [ 418.816010][ T3655] ? unix_stream_sendmsg+0xa90/0xa90 [ 418.821353][ T3655] ____sys_recvmsg+0x15d/0x310 [ 418.826126][ T3655] ? __import_iovec+0x1ff/0x270 [ 418.831167][ T3655] ? import_iovec+0x69/0x80 [ 418.835675][ T3655] do_recvmmsg+0x34c/0x9e0 [ 418.840626][ T3655] ? do_anonymous_page+0x411/0x8b0 [ 418.845836][ T3655] ? fsnotify_perm+0x59/0x2e0 [ 418.850644][ T3655] ? __fsnotify_parent+0x32f/0x430 [ 418.855834][ T3655] ? __fget_light+0x21b/0x260 [ 418.860542][ T3655] ? __cond_resched+0x11/0x40 [ 418.865363][ T3655] __x64_sys_recvmmsg+0xcf/0x150 [ 418.870358][ T3655] ? exit_to_user_mode_prepare+0x65/0x190 [ 418.876198][ T3655] do_syscall_64+0x4a/0x90 [ 418.880766][ T3655] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 418.886727][ T3655] RIP: 0033:0x4665d9 [ 418.890622][ T3655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 418.910269][ T3655] RSP: 002b:00007f269420c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 418.918730][ T3655] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 418.926800][ T3655] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 418.934810][ T3655] RBP: 00007f269420c1d0 R08: 0000000000000000 R09: 0000000000000000 09:48:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400030001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:45 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000a80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8cffffff, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 418.942844][ T3655] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 418.950948][ T3655] R13: 00007fff05d995ff R14: 00007f269420c300 R15: 0000000000022000 09:48:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8f260000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 418.991854][ T3686] loop1: detected capacity change from 0 to 1 [ 419.003610][ T3687] loop5: detected capacity change from 0 to 6 [ 419.013846][ T3687] FAT-fs (loop5): bogus logical sector size 768 [ 419.020150][ T3687] FAT-fs (loop5): Can't find a valid FAT filesystem [ 419.080919][ T3686] loop1: p2 p3 p4 [ 419.084907][ T3686] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 419.092817][ T3686] loop1: p3 start 225 is beyond EOD, truncated [ 419.099088][ T3686] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 419.135460][ T3686] loop1: detected capacity change from 0 to 1 [ 419.202526][ T3686] loop1: p2 p3 p4 [ 419.206434][ T3686] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 419.214517][ T3686] loop1: p3 start 225 is beyond EOD, truncated [ 419.220829][ T3686] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 419.229595][ T1032] loop1: p2 p3 p4 [ 419.233668][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 419.241516][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 419.247713][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:45 executing program 2 (fault-call:8 fault-nth:46): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:45 executing program 3: unshare(0x40000) r0 = open(&(0x7f0000000040)='./file1\x00', 0x40800, 0x0) unshare(0x4000200) unshare(0x2040e80) sendfile(r0, r0, &(0x7f00000001c0)=0x7ffffffffffffd, 0x0) unshare(0x12040000) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000000c0)=0xde6) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000000)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) preadv(r0, 0xffffffffffffffff, 0x0, 0x2, 0x9c) fcntl$addseals(r2, 0x409, 0xf) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000000200)={0x32b, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 09:48:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xa5030000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400050001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:45 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000b80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xa6030000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 419.375587][ T3730] loop1: detected capacity change from 0 to 1 [ 419.381936][ T3731] loop5: detected capacity change from 0 to 6 [ 419.395036][ T3731] FAT-fs (loop5): bogus logical sector size 1280 [ 419.401506][ T3731] FAT-fs (loop5): Can't find a valid FAT filesystem [ 419.405154][ T3732] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 419.408869][ T3730] loop1: p2 p3 p4 09:48:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f00004b4000/0x3000)=nil, 0x3000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01"], 0x1c}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 419.416159][ T3732] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 419.421485][ T3730] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 419.439048][ T3730] loop1: p3 start 225 is beyond EOD, truncated [ 419.445279][ T3730] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 419.464205][ T3731] loop5: detected capacity change from 0 to 6 09:48:45 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03ba0b80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400060001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xaf260000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 419.470803][ T3731] FAT-fs (loop5): bogus logical sector size 1280 [ 419.476245][ T3732] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 419.477238][ T3731] FAT-fs (loop5): Can't find a valid FAT filesystem [ 419.485240][ T3732] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 419.562660][ T3759] FAULT_INJECTION: forcing a failure. [ 419.562660][ T3759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.575823][ T3759] CPU: 1 PID: 3759 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 419.585892][ T3759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.595969][ T3759] Call Trace: [ 419.599254][ T3759] dump_stack+0x137/0x19d [ 419.603657][ T3759] should_fail+0x23c/0x250 [ 419.608080][ T3759] should_fail_usercopy+0x16/0x20 [ 419.613156][ T3759] _copy_to_iter+0x17c/0xdd0 [ 419.617845][ T3759] ? finish_task_switch+0xce/0x290 [ 419.623063][ T3759] ? check_stack_object+0x61/0x70 [ 419.628098][ T3759] ? __virt_addr_valid+0x15a/0x1a0 [ 419.633330][ T3759] ? __check_object_size+0x253/0x310 [ 419.638911][ T3759] simple_copy_to_iter+0x4c/0x60 [ 419.643861][ T3759] __skb_datagram_iter+0x23c/0x520 [ 419.648979][ T3759] ? skb_copy_datagram_iter+0xc0/0xc0 [ 419.654357][ T3759] skb_copy_datagram_iter+0x39/0xc0 [ 419.659569][ T3759] unix_stream_read_actor+0x40/0x60 [ 419.664803][ T3759] unix_stream_read_generic+0x691/0x1260 [ 419.670561][ T3759] unix_stream_recvmsg+0x63/0x90 [ 419.675523][ T3759] ? init_peercred+0x180/0x180 [ 419.680327][ T3759] ? unix_stream_sendmsg+0xa90/0xa90 [ 419.685649][ T3759] ____sys_recvmsg+0x15d/0x310 [ 419.690426][ T3759] ? __import_iovec+0x1ff/0x270 [ 419.695431][ T3759] ? import_iovec+0x69/0x80 [ 419.700118][ T3759] do_recvmmsg+0x34c/0x9e0 [ 419.705063][ T3759] ? __fsnotify_parent+0x32f/0x430 [ 419.710207][ T3759] ? __fget_light+0x21b/0x260 [ 419.715040][ T3759] ? __cond_resched+0x11/0x40 [ 419.719727][ T3759] __x64_sys_recvmmsg+0xcf/0x150 [ 419.724670][ T3759] ? exit_to_user_mode_prepare+0x65/0x190 [ 419.730402][ T3759] do_syscall_64+0x4a/0x90 [ 419.734891][ T3759] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 419.740854][ T3759] RIP: 0033:0x4665d9 09:48:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xbc260000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 419.744749][ T3759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 419.764429][ T3759] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 419.765530][ T3763] loop5: detected capacity change from 0 to 6 [ 419.772853][ T3759] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 419.772871][ T3759] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 419.772883][ T3759] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 419.772897][ T3759] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 419.772910][ T3759] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 419.799467][ T3763] FAT-fs (loop5): bogus logical sector size 1536 [ 419.825799][ T3763] FAT-fs (loop5): Can't find a valid FAT filesystem [ 419.840234][ T3772] loop1: detected capacity change from 0 to 1 [ 419.848993][ T3775] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 419.857054][ T3775] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 419.869077][ T3775] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 419.877134][ T3775] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 419.888417][ T3772] loop1: p2 p3 p4 [ 419.893289][ T3772] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 419.903482][ T3772] loop1: p3 start 225 is beyond EOD, truncated [ 419.909722][ T3772] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 419.978408][ T3772] loop1: detected capacity change from 0 to 1 [ 420.023403][ T3772] loop1: p2 p3 p4 [ 420.027996][ T3772] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 420.036485][ T3772] loop1: p3 start 225 is beyond EOD, truncated [ 420.042716][ T3772] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 420.081904][ T1032] loop1: p2 p3 p4 [ 420.085733][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 420.094715][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 420.101178][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:46 executing program 2 (fault-call:8 fault-nth:47): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xbf260000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400070001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:46 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03bb0b80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xc0ed0000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 420.248407][ T3809] loop5: detected capacity change from 0 to 6 [ 420.251289][ T3810] loop1: detected capacity change from 0 to 1 [ 420.257495][ T3809] FAT-fs (loop5): bogus logical sector size 1792 [ 420.267127][ T3809] FAT-fs (loop5): Can't find a valid FAT filesystem [ 420.300962][ T3810] loop1: p2 p3 p4 [ 420.304907][ T3810] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 420.316389][ T3810] loop1: p3 start 225 is beyond EOD, truncated [ 420.323269][ T3810] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 420.330327][ T3809] loop5: detected capacity change from 0 to 6 [ 420.355016][ T3809] FAT-fs (loop5): bogus logical sector size 1792 [ 420.361931][ T3809] FAT-fs (loop5): Can't find a valid FAT filesystem [ 420.426560][ T3842] FAULT_INJECTION: forcing a failure. [ 420.426560][ T3842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.439906][ T3842] CPU: 0 PID: 3842 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 420.450298][ T3842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.460838][ T3842] Call Trace: [ 420.464133][ T3842] dump_stack+0x137/0x19d [ 420.468484][ T3842] should_fail+0x23c/0x250 [ 420.472994][ T3842] should_fail_usercopy+0x16/0x20 [ 420.478041][ T3842] _copy_to_iter+0x17c/0xdd0 [ 420.482914][ T3842] ? finish_task_switch+0xce/0x290 [ 420.488482][ T3842] ? check_stack_object+0x61/0x70 [ 420.493680][ T3842] ? __virt_addr_valid+0x15a/0x1a0 [ 420.498810][ T3842] ? __check_object_size+0x253/0x310 [ 420.504182][ T3842] simple_copy_to_iter+0x4c/0x60 [ 420.509300][ T3842] ? skb_copy_datagram_iter+0xc0/0xc0 [ 420.514736][ T3842] __skb_datagram_iter+0xac/0x520 [ 420.519832][ T3842] ? ___cache_free+0x3c/0x300 [ 420.524575][ T3842] ? kfree+0xf0/0x1d0 [ 420.528738][ T3842] ? __kfree_skb+0xfe/0x150 [ 420.533459][ T3842] skb_copy_datagram_iter+0x39/0xc0 [ 420.538666][ T3842] unix_stream_read_actor+0x40/0x60 [ 420.543878][ T3842] unix_stream_read_generic+0x691/0x1260 [ 420.549512][ T3842] unix_stream_recvmsg+0x63/0x90 [ 420.554510][ T3842] ? init_peercred+0x180/0x180 [ 420.559272][ T3842] ? unix_stream_sendmsg+0xa90/0xa90 [ 420.564593][ T3842] ____sys_recvmsg+0x15d/0x310 [ 420.569414][ T3842] ? __import_iovec+0x1ff/0x270 [ 420.574349][ T3842] ? import_iovec+0x69/0x80 [ 420.578856][ T3842] do_recvmmsg+0x34c/0x9e0 [ 420.583283][ T3842] ? do_anonymous_page+0x411/0x8b0 [ 420.588465][ T3842] ? fsnotify_perm+0x59/0x2e0 [ 420.593140][ T3842] ? __fsnotify_parent+0x32f/0x430 [ 420.598259][ T3842] ? __fget_light+0x21b/0x260 [ 420.602954][ T3842] ? __cond_resched+0x11/0x40 [ 420.607632][ T3842] __x64_sys_recvmmsg+0xcf/0x150 [ 420.612573][ T3842] ? exit_to_user_mode_prepare+0x65/0x190 [ 420.618299][ T3842] do_syscall_64+0x4a/0x90 [ 420.622731][ T3842] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 420.628703][ T3842] RIP: 0033:0x4665d9 [ 420.632609][ T3842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 420.652311][ T3842] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 420.660839][ T3842] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 420.669172][ T3842] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 420.677160][ T3842] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 420.685133][ T3842] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 420.693116][ T3842] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 09:48:47 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000380)=[{&(0x7f0000000040)="200000000202000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000400000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000000180)="0000e331000000001100006fbe38543112eb43ac9dbc7e1411f64d55010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d7f4655fd8f4655fd8f4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f00000000c0)="504d4d00504d4dff", 0x8, 0x10000}, {0x0, 0x0, 0xfffffffffffffffc}], 0x0, &(0x7f00000002c0)={[{@nolazytime}, {@max_batch_time={'max_batch_time', 0x3d, 0x200}}]}) 09:48:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xd6010000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:47 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03bc0b80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400080001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 420.794228][ T3856] loop1: detected capacity change from 0 to 1 [ 420.804717][ T3859] loop5: detected capacity change from 0 to 6 [ 420.832055][ T3856] loop1: p2 p3 p4 [ 420.835862][ T3859] FAT-fs (loop5): bogus sectors per cluster 0 [ 420.841990][ T3859] FAT-fs (loop5): Can't find a valid FAT filesystem [ 420.842813][ T3856] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 420.856547][ T3856] loop1: p3 start 225 is beyond EOD, truncated [ 420.862764][ T3856] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 420.914517][ T3859] loop5: detected capacity change from 0 to 6 [ 420.921319][ T3859] FAT-fs (loop5): bogus sectors per cluster 0 [ 420.927406][ T3859] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:47 executing program 2 (fault-call:8 fault-nth:48): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xd7010000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5e01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:47 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@local, 0x0, 0x33}, 0x2, @in6=@empty, 0x0, 0x4, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0xfffffffffffffe8c, &(0x7f0000000080)=[{&(0x7f0000000ac0)={0x67, 0x10, 0x1}, 0x10}, {&(0x7f0000000000)=ANY=[@ANYBLOB="7000000002000000000000000000000008000200", @ANYRES32=0x0, @ANYBLOB="ccef6db02bc75df8dd0b6a4fda46b0cdf9b33ac05208c98f8d5b7f85331efa43220403000000243788b5f9dd3e880b281a3766e6cd9dc5c2901cb7f13f2309d45a61dfc137dd2d94e5156057de2d7d2d1b9569c252000000"], 0x70}], 0x2}, 0x0) 09:48:47 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03bd0b80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400090001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xdaffffff, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 421.122740][ T3895] loop5: detected capacity change from 0 to 6 [ 421.136016][ T3895] FAT-fs (loop5): bogus logical sector size 2304 [ 421.142425][ T3895] FAT-fs (loop5): Can't find a valid FAT filesystem [ 421.160483][ T3898] loop1: detected capacity change from 0 to 1 09:48:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xdb010000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xe5ffffff, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 421.176239][ T3902] netlink: 63 bytes leftover after parsing attributes in process `syz-executor.3'. [ 421.205428][ T3910] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 421.213491][ T3910] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 09:48:47 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x148) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='#!\tO'], 0x191) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2aa080, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @adiantum, 0x4, @desc1}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 421.227384][ T3898] loop1: p2 p3 p4 [ 421.231511][ T3898] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 421.235547][ T3895] loop5: detected capacity change from 0 to 6 [ 421.239329][ T3898] loop1: p3 start 225 is beyond EOD, truncated [ 421.250407][ T3895] FAT-fs (loop5): bogus logical sector size 2304 [ 421.250956][ T3898] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 421.257296][ T3895] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xf0ffffff, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 421.288295][ T3910] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 421.296359][ T3910] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 421.318813][ T3898] loop1: detected capacity change from 0 to 1 [ 421.333521][ T3927] FAULT_INJECTION: forcing a failure. [ 421.333521][ T3927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.346618][ T3927] CPU: 1 PID: 3927 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 421.356729][ T3927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.366792][ T3927] Call Trace: [ 421.370074][ T3927] dump_stack+0x137/0x19d [ 421.374631][ T3927] should_fail+0x23c/0x250 [ 421.379249][ T3927] should_fail_usercopy+0x16/0x20 [ 421.384344][ T3927] _copy_to_iter+0x17c/0xdd0 [ 421.388959][ T3927] ? finish_task_switch+0xce/0x290 [ 421.394121][ T3927] ? check_stack_object+0x61/0x70 [ 421.399264][ T3927] ? __virt_addr_valid+0x15a/0x1a0 [ 421.404404][ T3927] ? __check_object_size+0x253/0x310 [ 421.409695][ T3927] simple_copy_to_iter+0x4c/0x60 [ 421.414638][ T3927] __skb_datagram_iter+0x23c/0x520 [ 421.419752][ T3927] ? skb_copy_datagram_iter+0xc0/0xc0 [ 421.425132][ T3927] skb_copy_datagram_iter+0x39/0xc0 [ 421.430337][ T3927] unix_stream_read_actor+0x40/0x60 [ 421.435540][ T3927] unix_stream_read_generic+0x691/0x1260 [ 421.441206][ T3927] unix_stream_recvmsg+0x63/0x90 [ 421.446160][ T3927] ? init_peercred+0x180/0x180 [ 421.451071][ T3927] ? unix_stream_sendmsg+0xa90/0xa90 [ 421.456502][ T3927] ____sys_recvmsg+0x15d/0x310 [ 421.461357][ T3927] ? __import_iovec+0x1ff/0x270 [ 421.466531][ T3927] ? import_iovec+0x69/0x80 [ 421.471575][ T3927] do_recvmmsg+0x34c/0x9e0 [ 421.476016][ T3927] ? do_anonymous_page+0x411/0x8b0 [ 421.481163][ T3927] ? fsnotify_perm+0x59/0x2e0 [ 421.485848][ T3927] ? __fsnotify_parent+0x32f/0x430 [ 421.490985][ T3927] ? __fget_light+0x21b/0x260 [ 421.495683][ T3927] ? __cond_resched+0x11/0x40 [ 421.500424][ T3927] __x64_sys_recvmmsg+0xcf/0x150 [ 421.505451][ T3927] ? exit_to_user_mode_prepare+0x65/0x190 [ 421.511282][ T3927] do_syscall_64+0x4a/0x90 [ 421.515737][ T3927] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 421.521928][ T3927] RIP: 0033:0x4665d9 [ 421.525838][ T3927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 421.545458][ T3927] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 421.553991][ T3927] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 421.561966][ T3927] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 421.569944][ T3927] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 421.577929][ T3927] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 421.585975][ T3927] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 421.637852][ T3940] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 421.646037][ T3940] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 421.665139][ T3940] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 421.673348][ T3940] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 09:48:48 executing program 2 (fault-call:8 fault-nth:49): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000a0001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:48 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000280)) mmap(&(0x7f000046e000/0x4000)=nil, 0x4000, 0x1, 0x10010, r1, 0x1fed000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14000102, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f00000002c0)={[{@jqfmt_vfsold}]}) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000380)=@OVL_FILEID_V0={0x9c, 0xfb, {0x0, 0xfb, 0x9c, 0x0, 0x1, "adb57c22e9c15173ca0805cc1264076c", "e270c870aa88d4d611aceab00da4bbc956525014572236f19b956d7573c24c1ee8bc9e9e4cd2992880dae287a2cfc6a431debedabe4d9e448c1c393a3665180c45e227197492c2dbd0d5e1e5e192a68330080d3de0339e1db122dee6b7c197270e3bbbf6840e004b6466b7272243e36ed646cc71f3415962bff9072878cfc472363fdd6e57c364"}}, &(0x7f00000000c0), 0x1000) 09:48:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xf6ffffff, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:48 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000c80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xf9fdffff, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) flock(r1, 0x610916a88792d7b1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r1, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/148, 0x94}], 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x5, 0x0, "26bdf1f2977053b1ba8b5d0c2890824cfc4be7", 0x34c7, 0x8000}) dup3(r0, r1, 0x0) 09:48:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xfdfdffff, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 422.012763][ T3957] loop5: detected capacity change from 0 to 6 [ 422.046053][ T3956] loop1: detected capacity change from 0 to 1 [ 422.056882][ T3957] FAT-fs (loop5): bogus logical sector size 2560 09:48:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/197, 0xc5}, {&(0x7f00000002c0)=""/31, 0x1f}], 0x2, 0x8, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') r1 = gettid() clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000400004000c4a40003003e000039a59434c80a00100a20000000000000000000deeb14b60028cc7ebdfd74dafc2038"], 0x3c) execveat(r2, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x1100) ptrace$setopts(0x4206, r1, 0x0, 0x0) [ 422.063249][ T3957] FAT-fs (loop5): Can't find a valid FAT filesystem [ 422.071083][ T3956] loop1: p2 p3 p4 [ 422.077001][ T3956] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 422.084736][ T3956] loop1: p3 start 225 is beyond EOD, truncated [ 422.090941][ T3956] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 422.147476][ T3957] loop5: detected capacity change from 0 to 6 [ 422.168065][ T3957] FAT-fs (loop5): bogus logical sector size 2560 [ 422.174487][ T3957] FAT-fs (loop5): Can't find a valid FAT filesystem [ 422.239240][ T3960] FAULT_INJECTION: forcing a failure. [ 422.239240][ T3960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.252306][ T3960] CPU: 0 PID: 3960 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 422.262431][ T3960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.272492][ T3960] Call Trace: [ 422.275755][ T3960] dump_stack+0x137/0x19d [ 422.280132][ T3960] should_fail+0x23c/0x250 [ 422.284567][ T3960] should_fail_usercopy+0x16/0x20 [ 422.289573][ T3960] _copy_to_iter+0x17c/0xdd0 [ 422.294143][ T3960] ? finish_task_switch+0xce/0x290 [ 422.299241][ T3960] ? check_stack_object+0x61/0x70 [ 422.304254][ T3960] ? __virt_addr_valid+0x15a/0x1a0 [ 422.309369][ T3960] ? __check_object_size+0x253/0x310 [ 422.314662][ T3960] simple_copy_to_iter+0x4c/0x60 [ 422.319587][ T3960] ? skb_copy_datagram_iter+0xc0/0xc0 [ 422.324976][ T3960] __skb_datagram_iter+0xac/0x520 [ 422.330028][ T3960] ? ___cache_free+0x3c/0x300 [ 422.334697][ T3960] ? kfree+0xf0/0x1d0 [ 422.338695][ T3960] ? __kfree_skb+0xfe/0x150 [ 422.343183][ T3960] skb_copy_datagram_iter+0x39/0xc0 [ 422.348362][ T3960] unix_stream_read_actor+0x40/0x60 [ 422.353551][ T3960] unix_stream_read_generic+0x691/0x1260 [ 422.359464][ T3960] unix_stream_recvmsg+0x63/0x90 [ 422.364480][ T3960] ? init_peercred+0x180/0x180 [ 422.369334][ T3960] ? unix_stream_sendmsg+0xa90/0xa90 [ 422.374622][ T3960] ____sys_recvmsg+0x15d/0x310 [ 422.379389][ T3960] ? __import_iovec+0x1ff/0x270 [ 422.384244][ T3960] ? import_iovec+0x69/0x80 [ 422.388746][ T3960] do_recvmmsg+0x34c/0x9e0 [ 422.393175][ T3960] ? do_anonymous_page+0x411/0x8b0 [ 422.398319][ T3960] ? fsnotify_perm+0x59/0x2e0 [ 422.402978][ T3960] ? __fsnotify_parent+0x32f/0x430 [ 422.408188][ T3960] ? __fget_light+0x21b/0x260 [ 422.412866][ T3960] ? __cond_resched+0x11/0x40 [ 422.417591][ T3960] __x64_sys_recvmmsg+0xcf/0x150 [ 422.422591][ T3960] ? exit_to_user_mode_prepare+0x65/0x190 [ 422.428301][ T3960] do_syscall_64+0x4a/0x90 [ 422.432705][ T3960] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 422.438584][ T3960] RIP: 0033:0x4665d9 [ 422.442459][ T3960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 422.462050][ T3960] RSP: 002b:00007f269420c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 422.470456][ T3960] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 422.478435][ T3960] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 422.486459][ T3960] RBP: 00007f269420c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 422.494610][ T3960] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 422.502724][ T3960] R13: 00007fff05d995ff R14: 00007f269420c300 R15: 0000000000022000 09:48:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xfeffffff, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:49 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000d80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:49 executing program 2 (fault-call:8 fault-nth:50): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:49 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000000)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x21a1, [0x100000001, 0xeb53, 0x8, 0x101, 0x1ff, 0x100]}) rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) clone(0x448c0300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:48:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000b0001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 422.904901][ T4016] loop5: detected capacity change from 0 to 6 [ 422.915368][ T4016] FAT-fs (loop5): bogus logical sector size 2816 [ 422.921886][ T4016] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000c0001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xff0f0000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 422.947356][ T4021] loop1: detected capacity change from 0 to 1 [ 422.980847][ T4021] loop1: p2 p3 p4 [ 422.984725][ T4021] loop1: p2 size 1073872896 extends beyond EOD, truncated 09:48:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xfffdffff, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 422.992895][ T4021] loop1: p3 start 225 is beyond EOD, truncated [ 422.999069][ T4021] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:49 executing program 3: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18340, 0x242) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x111d492, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x88031, 0x0) [ 423.044452][ T4049] loop5: detected capacity change from 0 to 6 [ 423.054194][ T4049] FAT-fs (loop5): bogus logical sector size 3072 [ 423.060825][ T4049] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xffff1f00, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 423.088585][ T4040] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 423.096649][ T4040] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 423.116629][ T4021] loop1: detected capacity change from 0 to 1 [ 423.117109][ T4049] loop5: detected capacity change from 0 to 6 [ 423.129089][ T4059] FAULT_INJECTION: forcing a failure. [ 423.129089][ T4059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.142194][ T4059] CPU: 1 PID: 4059 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 423.152527][ T4059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.162582][ T4059] Call Trace: [ 423.165871][ T4059] dump_stack+0x137/0x19d [ 423.170245][ T4059] should_fail+0x23c/0x250 [ 423.174671][ T4059] should_fail_usercopy+0x16/0x20 [ 423.179700][ T4059] _copy_to_iter+0x17c/0xdd0 [ 423.184293][ T4059] ? finish_task_switch+0xce/0x290 [ 423.189463][ T4059] ? check_stack_object+0x61/0x70 [ 423.194553][ T4059] ? __virt_addr_valid+0x15a/0x1a0 [ 423.199693][ T4059] ? __check_object_size+0x253/0x310 [ 423.205343][ T4059] simple_copy_to_iter+0x4c/0x60 [ 423.210292][ T4059] __skb_datagram_iter+0x23c/0x520 [ 423.215424][ T4059] ? skb_copy_datagram_iter+0xc0/0xc0 [ 423.220881][ T4059] skb_copy_datagram_iter+0x39/0xc0 [ 423.226266][ T4059] unix_stream_read_actor+0x40/0x60 [ 423.231638][ T4059] unix_stream_read_generic+0x691/0x1260 [ 423.237382][ T4059] unix_stream_recvmsg+0x63/0x90 [ 423.242358][ T4059] ? init_peercred+0x180/0x180 [ 423.247129][ T4059] ? unix_stream_sendmsg+0xa90/0xa90 [ 423.252428][ T4059] ____sys_recvmsg+0x15d/0x310 [ 423.257200][ T4059] ? __import_iovec+0x1ff/0x270 [ 423.262057][ T4059] ? import_iovec+0x69/0x80 [ 423.266637][ T4059] do_recvmmsg+0x34c/0x9e0 [ 423.271058][ T4059] ? do_anonymous_page+0x411/0x8b0 [ 423.276183][ T4059] ? fsnotify_perm+0x59/0x2e0 [ 423.281023][ T4059] ? __fsnotify_parent+0x32f/0x430 [ 423.286259][ T4059] ? __fget_light+0x21b/0x260 [ 423.291073][ T4059] ? __cond_resched+0x11/0x40 [ 423.296542][ T4059] __x64_sys_recvmmsg+0xcf/0x150 [ 423.301664][ T4059] ? exit_to_user_mode_prepare+0x65/0x190 [ 423.307486][ T4059] do_syscall_64+0x4a/0x90 [ 423.311958][ T4059] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 423.317865][ T4059] RIP: 0033:0x4665d9 [ 423.321758][ T4059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 423.341368][ T4059] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 423.349785][ T4059] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 423.357768][ T4059] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 423.365740][ T4059] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 423.373993][ T4059] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 423.382255][ T4059] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 423.391757][ T4049] FAT-fs (loop5): bogus logical sector size 3072 [ 423.398113][ T4049] FAT-fs (loop5): Can't find a valid FAT filesystem [ 423.405501][ T4021] loop1: p2 p3 p4 [ 423.413008][ T4021] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 423.431786][ T4040] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 423.439823][ T4040] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 423.461682][ T4021] loop1: p3 start 225 is beyond EOD, truncated [ 423.467880][ T4021] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 423.482138][ T1032] loop1: p2 p3 p4 [ 423.485942][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 423.496695][ T4078] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 423.504744][ T4078] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 423.504970][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 423.516634][ T4078] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 423.522041][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 423.537170][ T4078] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 09:48:49 executing program 2 (fault-call:8 fault-nth:51): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000d0001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:49 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000e80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xffffe000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xff07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:49 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x208409, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1020, &(0x7f0000001440)) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104020, &(0x7f0000000140)='ext2\x00') 09:48:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xfffffdf9, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 423.767192][ T4100] loop5: detected capacity change from 0 to 6 [ 423.774585][ T4100] FAT-fs (loop5): bogus logical sector size 3328 [ 423.780963][ T4100] FAT-fs (loop5): Can't find a valid FAT filesystem [ 423.796284][ T4099] loop1: detected capacity change from 0 to 1 09:48:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xfffffdfd, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:50 executing program 3: prctl$PR_SET_SECUREBITS(0x1c, 0x25) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@private0, @in6=@loopback}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000002c0)=0x0) setresuid(r1, r3, r1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = getpid() r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xee00, 0x0, r8) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r9, &(0x7f0000000000)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r10, &(0x7f0000000000)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) r11 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r11, &(0x7f0000000000)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) sendmsg$netlink(0xffffffffffffffff, &(0x7f000000b4c0)={0x0, 0x0, &(0x7f000000b2c0)=[{&(0x7f0000000340)={0x2d0, 0x3e, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@generic="897d07b37947bd7d632d2126b3b3cd2b676a62fa10ce49758ecb93ffcf7b8fa154fb90c9cc355a6071ad6b892359c8354cdaa195ccf728f28e20094e8ce8fa640a101b1f75c12b648d0644d6b8a8e1e9abef87095d61f1f6a28fc1999c2595a9b1b2bc2b8f375d01", @nested={0x19f, 0x89, 0x0, 0x1, [@generic="20e55eb3df64c0ceeca916cc074e708f67f5718b5b871eee15fee2bc5d811b6bcc72fcc54331757300e1045bf421609912ad47787b95e4a3e19dd9036010edf7c73859d028f8f29943164f84c6c3c0825b32828ad5f4bc8be3c0456b9f51ec60da63d0e002bec797076e44d7e2cc831c5f6531fe23772952614bfa8c659c57afba1705f6d57b9f3f019a5e0cc8bd34fe438b24d8e729b36f2ba5788a3b49abda", @typed={0x14, 0x49, 0x0, 0x0, @ipv6=@empty}, @generic="afe94ac54adcb692d08ed05a70b3adc29d757239063e041b709de5903aaf3dbaadc32daa2cf1add8b5e37fcc83f065237777edf75e09220e9fbdf1d62a43b412c61c43cb9b1e62fa174488402b1231492cc8092aa4016bad7ada0994e1e39c5f4bc72baf59b6ed7ccaefbf19c98f1c98abeeb3f173b4f4448dbdfdc17420bc49721a7ae086a4c91966519043188f3febd9e6dc8c99392984b074770956830f16baaeaaae0296fc3ed8ec9c74139407f1dcb41fab62958e90b17a2ec084516f769b21bc445b0fef01b3d15e71e1b9a73642c09f44f1415bf468c637edc6a8bcc627257994b50f4e"]}, @typed={0x8, 0x3d, 0x0, 0x0, @pid}, @generic="26157656924272fdc15f11c5dcca782fc515108d9bb99774f29b4d20fab9b5ba87415d36013c0d08182853ac06377d6b038b9b320d9011bd9551d9c6332549cf4b59a56059d4021e9cbd55016419182bc6e72dfbc0934f96ae21bc7a756f6201b978a25ae6c57014f5d93650afb9663cc99fff67d39ce7dfaacc3f46377a33ef0578ab3665ee615f7d1ec8351816bcd06e35f959355f2a571d3253ada215609c283d5dc37bc98ea658d1bddbe7c2"]}, 0x2d0}, {&(0x7f0000000640)={0x718, 0x3f, 0x10, 0x70bd2d, 0x25dfdbfc, "", [@generic="7f0f4f3e94edbf0a52970b5aa74e5db9f56ff140d47fa5dbbf67c6d42f8e4f92bc59cac02758d594006ebd5e1f70aa583ae4cafc0a3d2a64929f947cee5d7ebee51fc5778650dbbbe992fe654258c538163231425e4e8dad45c434b6effed47e227c435e383f3966fd6d0d04cea63c0df52e5a7a74c3e355d0901457935bba6d6dfc21b8989be1a10d0bc98f7d94ad4cf532b8a1d77647e07857d20398816eed77c18988534863419acd11a4acb9f36d17569c0b7a", @nested={0x147, 0x4b, 0x0, 0x1, [@generic="df1494e3abc509041ac25e3d6129d1cef77265edc2bc33b39aecda4fcbaeab8d558eea4d936278ac58e976fbc39ed6270c8bdcd8a321aab3c496701dab3cda044c9698b14cdac1ab8077923323b293d51b3e7734d1086d23468a42d0306f5c9f676d726a4fe1ba1eb13f6a2b514ef6eae580f812ac535be1e3652206a44493e9da462b1056aa890a", @typed={0x8, 0x22, 0x0, 0x0, @fd=r0}, @generic="3a96281bf5f8b6fd3d9162004ff4e3858302d48d4771cf2a9963fc16781353376eeb3a450fadf8d3899cef12e16c931b9312980f2bde539fce6ada54595e267bbb48c92e7230de546af22023923a23a8fe02e6be55857049b2f66451b3f170d81be2383d87a846c140b34882f6a663582b6d394304990c22b77fb43ec642e9fabd5a93e98350834a490e97c9", @typed={0x4, 0x72}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@private2}, @generic="44e8b1c9220afe965b683bc950a589"]}, @generic="7b64bc967dd385bc3b8fabd02ecaab49c50911280638100dceb92c3a13bdfaab9a8c2ea642fb521d5a0b98dec90df7e50fa034713b4080e00e66bfa9e0786d7d23293c79401b95b27d7d7b6ba8c1d1b71ec411c1f150e2b13c4f44292c62dc723de7f8836cc0d04e37026bf6787073409867068b4d919f52b2e00a99e8ebe6c7e59d34ad3219917559adfda617bc2075a38921e11ef7105c", @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@local}, @nested={0x35b, 0x56, 0x0, 0x1, [@generic="a33d6313607ae406d524a6a717ec46fd48ec12381cb25e310a3063c8da1c4ca618372f95cf18965ad50bbbc2b6d2f26f663fe0709300e0a5f2747b6af3022b25307d6b962288", @generic="f1b6e3e5693cf784390a", @generic="76352dc1ba028456b38845", @generic="4b26dd3e33a77603323c05d5c6dd5f1c99aa92d05cbd70bf410aaad9e21d009eb4f3bde4b88ab9785da2d35724ce169b1f869b90b14e9cb40866f96de89dbbfd20f0e8ca4d62e082f688ef6310e83ac8313462f07d8844bfd85fee9cc700aaab946312c1a0017aa075a5a51056ad91b6d4c7d3c3fc137705a9b790f189ef271db0efd5189c0f721db235eb223113da96e0a1bfea8297c7e51b4153cd3d1ee1f7558a6dda67a919b00374c5ab2810d07fa77312f331b378457681c69b56a7128df3647c8da43a0fb733cc3d6f39535bd793d1ff55af5a7c0475ad36", @typed={0x8, 0x17, 0x0, 0x0, @u32}, @generic="c190c278bea3fdd99a651e7bbec723047d1c9f60b97e45054b92ed7dc96336efe953b385b85b903851f5e851491f19c4f2c585d3471b4f042ea5ba0ebb992cf4f0c438a69682adc477f3fd3c92ed1ebc2493f7299819e61718c5fc76406e5af78ccbc01694f8aca68b07b0f69c21f509825e6f75ad7733df4c06053198191e04b72d42dbcf98e78a41aa17e051d78e9f1c9371b33b6a919a2ee530d10d1fa1a59b2b5b7eda6dc791e1c4f6dc7213c516e524cbec4d5e0a04cd13c4c08e0e6c19fac180", @typed={0xc, 0x9, 0x0, 0x0, @u64=0xbc}, @generic="5ee3aa2ef9b5e81c6b3bf10b9349c4b0b24155ae5b664ab0fac3f00c254e6add5a5b2d7240d0e33f4eed20ce353f0a14921344eceeeb80e9413da596979d654b14c5e1626767d0003fb7dc4ea9901c471f21973906b5f8f8060880ad8991741e470a43644f902a8fadc5d36a7847c285420659caea8c262f4e7c", @typed={0x5, 0x5b, 0x0, 0x0, @str='\x00'}, @generic="9bc925eb521b6a6dcb4d429fa149a61d690af3bd0bfcdee291dd77d3fc3e8fb3142ecb321e3675eaf7dfe84f98b8d3f87411fb668911452c15013cae6773ad26b7242301d71f9a002852196ec81cc19584f5a9e0baefbd19d12806c4addcf64b47144874911ee264bcb08cc138b9007c0c8320e7c57b5f57bd1957c0ce7e374b3375090e561d2415749cb8e8dd06cc5b110aa7a3bce163e72c77df6f41e0909c82da8fbd1550f89caffaaf5eb2db94d85afa35de59bb1707d9f014ffbcff91b54f99c74b16abc296"]}, @nested={0x4, 0x11}, @typed={0x9, 0x29, 0x0, 0x0, @str='\a\'\'/\x00'}, @generic="981403ff31e85107e7c06deaf1df3f9e3de6952600f74c2fa94a99a12bfe67fb82a3305767fd5b4817a5d59133f9d1efc34f4e434ed3cae22696edc0305439e776e68122641aa5059a817b8ca997301aa87d134e883829519429cd2497401de1bc3de7ef375ffd9f9387c9bfa98d559b8aa18c607bc5cac7c428bab65e55babdc2bfa8716be86aed49a6df3d702dbee753b9cf4fbd096f9d6a2e4f6e9bcabce6b073a0f14b0a4545aad88982a2f8b78fe4146a4ec328de09eaf33458c6b5686f27edc71a1e0c607089bdcbcbd55558404510c80bd42107ec2ddc623f5f43c14a78dfc6748f6dc58532a12be599e5b0c7b3"]}, 0x718}, {&(0x7f0000000d80)={0x3c, 0x1b, 0x300, 0x70bd2c, 0x25dfdbfc, "", [@generic="951375d540f367aaaf279675d73ca231aaece15ab4967a4ad958084c118c9eea4f79fe3661fe0f9edb"]}, 0x3c}, {&(0x7f0000000dc0)={0x2224, 0x2b, 0x400, 0x70bd29, 0x25dfdbfe, "", [@typed={0xc, 0x6, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@remote}, @nested={0x103c, 0x73, 0x0, 0x1, [@typed={0x8, 0x58, 0x0, 0x0, @str='%\xef^\x00'}, @typed={0x4, 0x6e}, @generic="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", @typed={0x14, 0x1e, 0x0, 0x0, @ipv6=@empty}, @generic="5e9d7b671f88349a003b269e996afde5108447592344abb7"]}, @generic="48808f1b17615681d16b318a350c4cb668d76a9d1a27bb52c182bce33b0ddcdb31481800ada4d8573909efb7f23a7390f0f0093cc2489017ae586235e3eb53db2793a193", @nested={0x117f, 0x4b, 0x0, 0x1, [@generic="a622904e0d30f0516978bd2f5fcb61857fc057d533b5976deaac6d66bd7f5ef6564e0e2efaeef3a1fabb600f1ab1efeb7bbe9435f3b9ad8a68090712b51accdd55008850a6816e73b978ae0e6bfa73833b9c9514a06184df3d9ff48659141d8b5241504d75f328dfd795035ed9c5e6b921c1b5c5a3980a3ecb14e33f17d01b089691b9aee2108c1429db59cc658ddb78655791e2170245fbf98eaf084466378e1b574904a762df4f3af733baf5a6840129f906aa54fb5e33d6be3b101063", @typed={0x14, 0x70, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x8, 0x53, 0x0, 0x0, @fd}, @typed={0xc, 0x7f, 0x0, 0x0, @u64=0x3ff}, @generic="b4409d2a4f9f2d27902fdf72b13209df93541d45093b4e72a680a5ca333fe59678bada5106328a48c1e8b42ee23060907f8a589e508e49ccc788859d7aab00996e", @typed={0x51, 0x46, 0x0, 0x0, @binary="4f6dc4c2d60570328ee46f277bea2c3470fd8d4ace173622653fba53be12d3270a74a6d2522e6174c513a7056e0898c7c712f103a1e3e0ece1864e999655397eaa3124c1e917b7f6b23b96d117"}, @generic="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"]}]}, 0x2224}, {&(0x7f0000003000)={0x12b4, 0x28, 0x2, 0x70bd27, 0x25dfdbfd, "", [@nested={0x12a4, 0x47, 0x0, 0x1, [@generic="20cb9525e3f7bd705b471749307a0310f625535ea4f8d0aecce82983d6ea6d23a432eed0118e18a985a40b8ad6f89a65d41d71637f90dcea785ea15bd10b0dd41765cbde3042a20cfa08470c35397d78", @generic="b6c86b40b6d28cbeb83efc4a3527cc2aadafa6a408f0492042c666edee4a76f8e3567eed092c51f96d66d8214adf6089ac29faf146d486310b615ace872dd108d1a67f1cc5da91ae0d1154d4d218bd7def2f887785dd03acde2f11fba95ce9d8e156be6cb19ddb69a8ead0114ac61ee5f8b322fc9f09b63c", @typed={0xdb, 0x1a, 0x0, 0x0, @binary="53a4b77c769cfd29d4ecfa3c15b9e45ffa01f390952ea1bcf276f8c7f76591f9da72b157f2568ac77a1032bf697e261c2499c884cf2c81e53295f6323f92b471295f4eb9a5474ffcf029004f497af47b63a3fcd5c7d15f5b66e6e395380f9219e46f51890c1646f60bb314f298b16fd705cfd2bd022172b24c2c87a8536efafa36d66301aa9df5f314b08efe24a360bf6262db21e9d1ace1253fe2c44808b18f1b50d4efff6f513c21225e17bbeae59c1d7b5c29133e80033c85c2f34deb9d718f876d44a31e19e52db5be64b141f064b4bb26267cf664"}, @generic="db0ac514a1d020a3cbc81ee845b8e15d6a192c96d29d3dc9234964cb82cd2de5b2e2b99c5599f0fb9c87e967ac020366f94bfac425461d202025595ca8b3a1cd6f351ddcc7525990c62e5eb7811b1e1d81fdd9d0e43f64488c3a64433f5e02e5fe21517c91241e0894c532457404644c6bd8ebac00d013ea6b2bd9a069d3642e94e9aa14c2bc97543f4033d94294", @generic="326013583559f64ecff7cb04acb640b6c6c71669798bbe3546c3d217c2ad8c4b2c6b557deeac3125a105e93a03eca21d740f8c4a8b5ef8d33fcf86582eb3d6d6215a15bf5b5ec6f70ab6113e94c1964bc6d0157c1cb7fb1f4b541aa150a1248f8ea96b98ce7979dc9b91cb3a2d742c1c81a6364079df6578409a33c22589fa347f13b65ec113e60ab8b6695e3e9b37dc572258e7cc0ba3a14493442c0c7a57e0a3298e2387a551556b0f1639b4d4aae61611d456d3542f74f5f8721926a2d056e7bafadf743089a2c2d7baa15afc74dbeeae76ab4de84f189d842a612556b608fbc15a33cdc4defeb248b2df955a3acd422c90647c47afe895ffc69aa6e81d12f4e4ac075251c6f5fb32aad10a8b88a5b00cd3c4af28af80164908fdc3153467d3eb61deee49b73f1a7858c949014041bc55caa43693f48022922fea894c679798d8b2881f522f582ea5b669ed67c268f005c9664968740dee156925302d730523cba0e7391fd96dd19781a24aa4101f89c480cf9979176fd0b0425a3852188ddce309116263b1115a66d916876e92acc49b638a4ec0823847dad9c776f9851d79759db511e04924a4801906205965f55232b0fb682ac46b3a98c4d49d66159b4acaccfb7d504a9481ebf24e64b57ddb1bfb5bcbff17fc51c0aa1d7282b8668e07848114e9170b987c6907f88f0a0998c29717f423c96165e719f5b5e3fb5485c70751d6829d67d442f1a8793b7458532fd0abfe61e318f454b2b4c5f0270d857e80f01229f7b4e9e459886600a91456b8507d85fcf6dd7d7160ec5c2e966c182c69569bb721ff1f5ac2fc024fb7e15141ac9a6f207392708b08e74a8c011ef4c8035dffbf3fb64404b91a16dc71e33acd39351973f7541f31a4af4350d7ef3c8adf416e7cca9eb974baea4647db6f8c9d682d94705b37f0e0e0bf08c95d44b306d95abfe814b88cef58186d890c454cee8ff1b96d0cff9478bf226aa744e9f39fbdcb7e74e20760fc06d3f249ca829642810b46dae2c88b2eb4ae17d85feafdeed2591cdee621b5072a095b0dba94beb0606b4e208cb8502cc0961372e6ebacc250bb9e9a751ecc75fd52a9898ee26a979b5e252ab2125dccb40bcf1c0cca3f0e2ab01f2feb85dbcc0e530ec16502fb34f52c3efa7810526e0fbaadbdb7b20f1812834b4adaf48fc6243f81b76863ae44bcced3e2670a941f205ca2eb6ccad635edb4edc1e6698da235daf2d514a6ce009bc80d276fc0cd8d0db7dd2c11d9b7252e1723632b376f97896df9449018ac9254837802704bc14ba3a57393af7208644ff14de7a0b366959649ac708bc635b8d040a4275d21a6a2597e499afc1268188e772ad8467ad12cfa626c0eb86373b81f8d64f88c51d8103f600c4561585f7a4b936eaa8bf422f108cb35856a0cae98525da8dd611f688fe1f17f5593d70e334e157d2e69b05dd145c7b66dd8dc3ddf734b23c85ee059653ad2f00f9e292d356396dc7575469448bf036f849ae7e63a69f6b0372b3d4686e981d6c628f30a80b50a155506108cbc75074ab8c65074a72f07a614ab40dba9bbd9237d0cee2bb6969251714a3b4c86c899981644c0faa7e1ec16d0d9dbbd3f56fbca19e399254ff1aef105dc59a4261674b78641689107a3b4141940a8a9cf84e69b8fb0a94416e8f03b9a0190a58347a6f42b7500b4b5ffbe12c17a103f6e7de1d5ae8e7f8e3916cf00e3dea1265fbc6f5aba7e36e0a24da8ea222d65ab75db3db243fef4ee52f98e0a2f9645c692fa85a7e7b5eef5c8a8e003c9e17bd502b0109493ca1e1388f31245bc95ee0ec0a84e7a8c9be0c69d2407828a2efd291cf3b06ffb56cb7bfbaaf2c005d0bedd5f382c1cbb92346bae40aa71be3d007549f7d6dbcf6e97d6b89486d59758e145708f458f905be6a36aec032aa20e563c4d52887930a37312c462cea11c3377b5d9fc6462b15f7685c614bbbd0384a708009197b6a4e083ce2557011c0255b4a7cc9365bc2f1cdfce1b7c30a86a152ec7b4e1c4326e385080a48beefeee0dd06ecd0f059d04f35fee00e4bbd2a2a496b0c6e0ea9261f64b36a26aec7ff92b07b375496fb6e9555d802a0224f76fa3ab2f34179a9b6c94365c0eb9710b155a9dfd35e3d481425baa8742d672917a7b57916a386e19565abe5345b9f6c8a47d47116b4c5d801f5900d6e3c9973aa3dd3c91673ef1e9779e04f854144fe0c904ff29247e60bf275fc9839b880fea4c56a8ce1cbf44727e14f1afb642ae54fdb360f17d142c5c46db1d2f28163c6437b6c07026610e9b22686919f180693293536b28821408f6520ce152850f8597fffc8cdcefaced7400da8dabe95df030324a18f0c703011c508bc7be381b0838483f9b3a914d692be522265f83259286af7aa2ea3cbb2b7df9bfacf8b0ab3203aa2ee97a2aa63383aaf31e158493362d1cddf01c795f7800d622f0f3188f81bc59d4e9470a7014889a837aad72d8f42ad3c848d246a8cf20dcd4253effc3cd8a4cbe036d821b7f6432eba0c16f33110c920b20dbd9112d9a8e570e735204cbb742b4bcb68f4c210c0f9fe83aedb3c97a1944049c4ed799ac67ae7ea646fdfe710e2fb075056130a4bd1c4d1c7d29923e80921d3bc9a2672c276d0ab95796457836798862a28ea8c02764eea6233b5cf9f925c5811874dc9a36032e063df903f361917d881b3383044c1d88dcfd77cf8b67bddaec141cc9a90735463bec94cfaf6e33bf61e79edfd08ae7628053bef09f9129840bcad6dcfa86cbc6914b8750359406b7ef3dc5355c216cd1715a7e4d4e3621e4c3778f09e4e32078e5293f5039b1c4e6f1ad11161de15af0154a19ab83120e7cb5da6f2d44a57951962aa2815e400290fcb30bda3e592d54cac9edc2bc981d2cd07c87b9845891d9a0a62b05b3b029bbe6bcc3a38f90da8eb1de3e84c4e3496832fffe030b616d20133c12aa381ec57438b3e87205409d0a8d60b70914cbab2ce559d9e3730068a390f3efba0db9d824877337bcbe86e6c04f734d5eeaf67d8af4aeff0fc819273bd26fba76ffd735b72cc00a5d53393afc831a8ddacdf861baa1067cf2ab6316a123650c611ce10f8cf6ac598f47bdf9e4fc7d9be9cc62ce253d7514fb25aca8178b9690222855519aaa6dd971ff62f0e4b812b5bae489002e390445bc876902bf5780e0154c4bc3fed47064030abf70cc62431a6f8384c9b4adf5ae2d66a9a91828305252f3c3ae490d02449a1267cbd8d5bcbd2831d8e2edcdb8de88d4fd06250476fbf16ceb82985677af0b637776a75e33dc592291a145344634c47ab180cda6405ffbdd99cc9172a214879e8edc1a92ec303c7e016797bae082094fd966dc09512e4255d2cf18ae01d93e165fa02913c304fc4d19dab4fd98a1d14b15955912543f05a19fb2341940d00b1e680261288638348f44dbd106035ab6c501b8e1428119ffe8fca9d6c0033720afc7b1331f4df84ae2affe4a55991485b7b4c7b33c93c3141f45ea30c7cb1ed422899b4e3ac6f2891c4d1ad3b31e4974a80291f622b116a91b7506884a6c884a08a5f1dfbcce506b7c0a25b013f0390d0a4005acb9f612c9deb7432a9c4cd47fb84e0b296be721f1e31c47ba13e3df3e21dd2d5d245d0cf2bd3790d22a93ee3ba940ce778082c34a278dd0450fe68194ee84f05cd09d84150ae67792f3465c52a6d4a29518c0ebe30eec15816ce1d0582c17e07244346d8f7d8091644ac5bbc0637d2e30a5f713eadb73fe9f9536ba5d96a73941cf3fc9b7ad77d4c170c13b306225a4463851d803e8ea07e4331844db6d8c88159e3b30705354b81385ee765ff6630b4541fa8a2dca94298f3099e6aa20176a41260f080604bbd386be8d55d20c9d74172689f2ae0a9dd0dedfc7dbe6ee4ac46ebdf43cf26052054794bd7c9dade2fe1411af8ce3a17c30a88fc65f33ae1f471544c9306c4d8b971c5c6c7f81cb0424022a54dfdf2cacdc81a0b047fa2c606696c0fb0a494735b7f227ed55dea112c2e66fd917f17bbd65cad6704f75a4acff25f761981096eb8ba4b673e98b535f51529feb0d089ad39b2587a273c3fb50eccac66b13dea7bc352284b07ce2bff8f0b62e015d9f685f6d5f1c294e8fbd69a333a6a1e87fd65d0b551745421ed40d4e9774ab98eb494ebd0907a586b5e1e2f34a86984cb59db47b7987479fe26a49a61b01ce78af72baeb73f407f8c6395d3f1596703ce0ff99add79009d8fc09c1407e052a0b561fde70d11e5f5fa0e8a1f6876b658e934dbcd1ea1fb0d3fa4ef0abedf4f529cc363b240b4bee74419f65c441952bae75df4b53f0abc6e60efa5f5366623d13121c4bd6ecb670f2363592b76196ee68fe2417dda34cbe856983c7aea15cb285279762096a117161fde13209e498868232678246b0375eba581a968bbcf448cc141abc9b9f95ef81f4cb590b0a48b2b4ebbfdefe37725c212b11067958b2e85df6fbee77490663ef9ec0ed5515133bf41ad6f83297f20a64f8d08ce023b66aec100da6a31a3c99d931a2c4691f35f9c1a2d2c0e1b04f64f72c8a83780c0b717b5aa2b235e75b589fccfa4bbbeb4f6f5ef52f041f3639afc85b43688de40caa5a1853fe39430e4b676ea4430210bdcee2b9cdf4a0e0925a8fc1c68ce72fd84369767e54a10402648b4086d7064a2924667d20ee4fa9fac24e6ba4abab063c1f59790908da838a9270072665a179766a4318ceefd1947a0b43fed3aaaaddea889c739cf5f6bc6b27a574b348366b9599a4e5799daa9d288d0f0ee0e0471a94246924af972bd5769691687762abd08524b419a0b1d8f80b14704cf8f05c355f2891e0979b5f9ee8b9564d8b789d3a54bd32a42cb2e19e365b4291b083d3c5ee2a2c70d83cc20808418009a4d0b2d8854e7a82fb994a598e25242d90f317090a42025b766de66952c328f37d764e3f771e502317d8d4b998d83a5fc4ea01eaedad0ec6559d633c5f873f86c4e79b3486f52a31765f54518851693b7cf3da77bb55b92b088afda786181071a4bad76ec725f9062bf9ce294ca246f68a2cf20719a1d4d8380c6243b1f28888c8e3c0427679005913b7e06b8d638f7ac867e3a6a482c062f73ec0f0f4daac2ba0ca321543791be9306de0156d3e22f3655f362a61bf66db219ea8f58b9ccfae74a422dd464399496f0288d69b5da58cc7cac90e0d9937d165779e8e69fe4ba6deb051f223c827b6f8753fac5d6e23da153a19faecd9e4ca07351df210985924c3b9686b4b715d93f31eecf966c2999ba0308ca6205163943e9738df490f1af0879bfe60bbbf2ec13974a558c574ee3afaf6ce0127d4154c118e21db1d8876fb4c19ff1425e1c7e4be87355547c4800f12a50a529e720537d7197990ea62820b00e6130f707cf88cece93b4d0c7d459af51cc6e3e0437f9bb960e12981ec6e414145184276779703dd57429bf3794eccf055c8cdedd19153574dfaefb6f4d233bdca77a074873b8e56971f534a849b73b887fa0a59acf09a3dd172e379f87fa8cb6ba95f4fc73d87ca7147a3b7da08735920ab5efc9fbda3514a8513690c64cbf269443f7850b105c0370c199aacfc1f51888d3c7abf3bc3acee32abd402e3d6224ba5af9391be5d67b1d246801fa63a040ad4fc8fb4960c2b1ef46290f82b11fd4b0011cad56b0346178f44f4ba5b13e0e3d15d884da0c65d98138e121cc27ab2973022be5a7941fff32d58375f19277e1fdeee3f5152a02080903d96c7cd24dfc47d8fa118f500d1227308b60f8f12ff17ef1d52", @generic="f9d3528d103570c210445b3e01316697738d1a7a02bc4b322b422f05ef843deca14093a22333ff12b38c8a4fc2170207b2ac9f83401f304e27984132f62eb34319543fa56b5af63f2e90f6c12f52b31b930cfbbf85c0ee09d4be73c20023a075932cb4f9964062d0571a6321d7fc"]}]}, 0x12b4}, {&(0x7f00000042c0)={0x276c, 0x38, 0x10, 0x70bd28, 0x25dfdbfe, "", [@typed={0x8, 0x29, 0x0, 0x0, @ipv4=@local}, @nested={0x1337, 0x6f, 0x0, 0x1, [@typed={0x4, 0x65}, @generic="8fbf3585f3dbc7590dab02a6d17ae5a6f84240603ac432d5f425af03983b9d4570fd35f6d8b4cb911dfca22481761ce53ef09083dce1e68a2a609ce545bf0d7af7ff30636d546c6b9de104ad33980901bd17d1ff16adfd77abdd813412e39f2c1802ff6f6ab9df468313167d78269569370278b8984c2b5755e7b769fb74d696da66a34312b8bedf28c1c84ed9212c3d8ae5c22b30343aa8b2afeeba9f2d54a24c23b1f4ec5cf573d605afee6c7c75357dabf401304fed00e93997277dccd5c8a873e40d532620e850f26850501e55216b07482c45f8a9768470fdc8094063d472858ebb9124e48ef77ea730e63da36f7d98699ec1", @generic="c5ceab81365143b35f38eac3283c8a84e4bafdcc4f5094c85e9c2400775c2006d25d5d08660987fe41a53f5fb2c3516f50b46073af866d481972e00c1923597a25afba008c334863655e97ca88e7b6e31adff6a81164b36f0aef2b4160b9547e35734d08f44a274ef67773e5e0fa7f5a00f87d4892abf62d3e34c4792202ea0204de8c577c6b53eda0961ba036b72b1a96a739578a7c04142da234c823d7354e8041b6c81ffb9534f49974d42a482458fb25885db4737fe2", @generic="740531b73375076b4761fa96ef3739f7272d727ff2ef6e7784c8be6078ecdc72f6c0e0b06fab67f47003fdbdd8618b379753dd3adc6db22341e15d800840cd7bcee9211aa6be4a31c2c4f23862f53e8773737f27a3b9e86f211463063d49a09bbb1b439fab5ce1b3ce278205a73e572352324c6b09c80c10064ce83287f1887edc4a36612225e65ccca43c8a0d320f68284272", @typed={0x8, 0x7f, 0x0, 0x0, @pid=r5}, @generic="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", @generic="f80c67f1091d79a8a4e63842a135a66e2ec4d481fdcb01f7cc6444b267e9263f13ef9423c7f691e01ea6755f0135427bab5f34d594223c595b544f2bc55ffea5db4b00746970632dbae23321a2bb68fcc90e4f41ec8295994d19bf0b5f25c4af9a24088dae6df71afa2db8ddf37c29ea0b2c5632690288ab53f9677b767d82bc703e1202ad8eab838fee517273e4a17582a8d5aad5fc2e7748744ac1644953c1aa2f5257dd8f0070c77f11b4e493238cddfd6ba4997c4f497270cca543f242da21f856632a7305b3d7202780a45490dd6efdb791a0dfaa00cd6125e67097c9", @typed={0x8, 0x7, 0x0, 0x0, @str='#/$\x00'}]}, @nested={0x115e, 0x22, 0x0, 0x1, [@generic="948c67a96b173fa64be8ae0317cadfaf8b25353b9f7f4b7f72e51f27181e8420be3b1db1b7e115e52e3ead4b08cfe75d1348485ad3c1ecf55498e79f2ed6f11859a504ab8a54", @generic="447e71d29e6a391cbb2b41707580afd5fdc09fecc9319072a2cb6288d5ab86b8d59ea096427ec72fbe2741c6c88e5cb65d3d702ba786ca857fd4080e8baa6113e1c0933780834858371677d11fefd52991239c1133cd590296cca6a5b1fe2206b7b51e6398a55769ccabdd51140bd283fa95beb0cb56b8378ae0912f424ce371344cf4b3fd57e9244e45", @generic="327f7cb5a9d8dc6bea28950918b6c18d90c07ec7e13e7c1b3dd6200df373733cc5c15ac69865f6a868ec26ed7c1256001b2976b91450fae7bd6cd5effceb0763d9545b4c5ee9c884c8e54277a2f2dc59d2d3e6fc566e9acdf852b7e7c7c8564ca10a994b231640f1c445a509e273e521d4e8c8255eff6617b7c82b", @generic="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", @generic="6779c49263d33248da18ed06f83efa"]}, @generic="c95395a4d0f9ee0aadd46785d1eb9ed8eb83cb117226a953de8d128bb4c369dcfbcd2eda93855d498cc89b13bdebc6f2ea0c94f533f43363ebd781a9ea89005f8f84654c50eeacc0d913568b0f0b51d92d21883b8776f8aa52eda9f62074dfae14793c7ddcd610345950", @generic="a34bb199d485", @nested={0x146, 0x12, 0x0, 0x1, [@generic="a3f4b2364c90ae900cfc3d4cd2177fa92b696984a24b52b02f29f28cc18a79f9f5d69fe0f2baeb7dd4a0986dd420edf4b34d67127cd54aa039020347cdaf22dd9e6785a65d3fcc9f6055594aecb23408b5ad4c74e6f4d2828d6a238fe05cb4741ca4cfc7308c03da675dc98e130209d22cde5a93f422b8ddbd8661750c3d2a12f604c05f4ee9378908", @generic="8ca1170c811e7fc372c73aac", @generic="31245a5627232180af6e41f4e75afb6530f783eab756a53e89222d7b8dfa38de0fc484b50d0dd68833d6879335f781f77b6064590d2f256146f9d161d17648c7109647baa348db849eb273bb4487e35d188287c4a17c0c8cba5784910604553ccb216eb8cbe3522279a26f0effefff5f6f211c0e8bf4c7f4abb10f0f943eda196b8766aab30a22f3b7cdb42c80f46513e7ae5ee88b3de14c89", @typed={0x8, 0x8, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x8, 0x4b, 0x0, 0x0, @ipv4=@empty}, @typed={0x4, 0x62}]}, @typed={0x8, 0x45, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x89, 0x0, 0x0, @pid=r7}, @generic="923c7a6ec42057588f01a352029f7877de506e6d1dc6fff2042af82c6738db4b0085917681dc6644e1ba5a4778bbe666d35ce36e143493e88e3c0a9f58d356e8894056b0a021dd7fd130de752239e0cf2361c5ca3140e8db0ea6ddce98fb3420a62714ecf6c55bc79ad2996e11dcec63c06fabe71f40b5ce1ecfa068f9b6e761a3d87748566dd5d2fad771a94af8217b9e0f5914459a5ed0e8a895652877d840d8d5925e7a2dc55e7f6e9e5b345b8d0dfd057a5e295fda1c46a3f67c88f374c50c223f542df969863e6d62b513472084190220992e55ce94c30dd716420e8efc1d323668bf0705edae30a885c3be0f511d00"]}, 0x276c}, {&(0x7f0000006a40)={0x18, 0x2b, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x8, 0x76, 0x0, 0x0, @pid}]}, 0x18}, {&(0x7f0000006a80)={0x157c, 0x24, 0x8, 0x70bd2d, 0x25dfdbfc, "", [@generic="13fea132d4197997f8e3671a03cda7e959962c31ee7486547fa7911dfafe59a31eb648998458b685a63bb1b19405903103d448e5f28ea65f079775a4176141c74f7b2499eb2277f8f0456e635118d304a6ae61ca019ea41f358d646effd2c22ead696e3d6da51c4dec198be31e1eea3e6737301ce71035a6fdda3228f1edf8c90a094163eebb172f7c", @nested={0x24c, 0xa, 0x0, 0x1, [@generic="b530193c4417cd9d3719fb37f64828b70afc90f37466dd95d09682836efd3c4945f78003bc656d228c88ca8c207e9edbde45b12e9181a5111b6a32758690f915c6b7a57524f09d00ef8b432031152ab9ac296afcf8855d6c4b8514fc518b82c738eab2bb8b871a3b23bee530cc8ba5aa346c1c5d20a66b0c6379608b24b7df2e8b4bea3d25ef9faaf3ad4941bdb13ad967c67586c0fb83ab976668679ad2e54533a3362481236041bc31f37a5291c8911b243cf591e1da2205faee2806290f671a88cc", @generic="9d0b32cba80a1bf0c6c75e4bad3b4b61add6677549cb5b302f8cdb297e5f9f329c422d199df7ef740805c167d1b78a7ce85c644e43cebfd459c3fde4da48244901397feecfcd14c70be4", @generic="d965a7", @generic="d9c5beae75a364e9b0c42ebcf69e985460bfca08db1560d249132ebe1e9afc44b4e033289ecf2de6ad3e60980631bb511fb25ee0eb42947147f98908cfbc50fdfc1805466127d2e18a81b69aa8f64c828e7ae5ab2a42", @typed={0x8, 0x2f, 0x0, 0x0, @uid=r3}, @generic="df21f592feec0b58cdee215487b598fcfbf45b4ff59f8c75469cd4b48f723ee04e5af74005b53fc8426e0935d1346ea93341899b938b814180287ceb1fedeb60cd840226a85ce3809420c5923864a0d9d9b402a04721b43ce4a02de2dc7ea7d4c0186782a3cab3e492af259a51e33048bd4ba0cc375afb9368c6d84fff2000bea5159249e46e44e574dccb8d93ad535252f3757b75920c827f933866ca155bab190873281cb2110906fdb04848dabdb63e9f270139f8fd7107ef1109f1468be93c7eea3c6a01bee9fdddbb4deb104d212c67", @typed={0x8, 0x6a, 0x0, 0x0, @pid}]}, @generic="727df61d773dc7e20412e8e2e77387f5605124457a1a8241563f9a11b2c7b36bf37ab1b9e6f674130554a8858c14b2c2fd431211f287a523401c25717aae4cb6df43945a11fcbec3f44aab82c2ccee2a7bfef991500c572c8e630d14403ebfee5ede4923562c5064c159a8b906d6e82f6ad245b431e3574e231a72b3da20897ab26a61286687160e3d27b33a68e9fd571bb63048fb93a0623b389d3294c9751fd05d58b9292226fbaccd1cbc584b88ccb223ad152b9edf1efb5c0e66413df0582fbade9a14a07cd1f5e463a357a88e", @nested={0x17, 0x6f, 0x0, 0x1, [@typed={0x8, 0x61, 0x0, 0x0, @ipv4=@local}, @generic="3ebf962dffa3c34602054f"]}, @typed={0xb3, 0x3e, 0x0, 0x0, @binary="c3ce2fb7e283f1d302e193a13aecbb109128a2cf1bc4f84845d0098f0f42e0765e3722896838e1dfae61a95412b8eaa14793c6633594c82186fabc864be1ce4284a23c456287984c90d63796dd3c515d7f4c3dd9f6d6c4c0ac3c925b0bf1870a980aa62276faea66800b0e961f2d7cffff3086b6eca7a5112eb51d8c26cc6acadf53427e6a67526796d016871ef19aa46764683468b8f0a8b13fc625eb017c693cd4a3c5d331bd160bf5484c4978a7"}, @generic="c4193ccb1dec77b5e579cc78b9d3fdfd5688f67ad4f85d9dba19bc753de95d67076d0b8d20eaad00eec615d3c522f402c6f505d2222b1a0d79aef30b50f0bf54222dda1274808ed495b2a277e22e6775f1679c1a090002cab4fb595addd6a3dffe3602dc09df44e982c679c7d0c7cad054bdf5b94dbf1a9900896c609bb50cc6d23aa0c8ac3e65a1fdc937c374fbd4e9e943c0e7107efa28204ec2ac7dd64a92d1a0ca1c03542db355791840835e26bcde4a4bb50d8db6a0850c094cee4a403428c29ed17485c04f0623f01304852e3b78bb58d42cf8309d185410ee1f7068f0e4169e1d7613abe12fed58685cae14b72b84dfd2", @generic="b63b0ed496cb37b1d9146f7c0469d4916f9fa4f879444c2868fa9b016b36ef322ce7c9d11a9bd345b1d87712702c3e5985034230cbb2649c97cff06a63a8d61af6fc8167770efdbf27978f6a25a28083d4379bd5eeb81e0d7bad6db6a6c5982da4ff3492c1733e3dceb72f57f44ac4de9ddf54772a50c13a4637a7c43d656f7c27ce0dce501b065665db927759fb0c39a88b4e33468da6f4cc5cff3a438cf2416af1225873b56d77a97981cd2db07467e025cf1291dc35b8ce83a4a3acb0a58e1a6f650b41e35379ebb426901cbe9c9cf880fc6a406e78b279160870007bc897793aa86b84d968bbc2039a425290b344126b5bd8b22a65d2ef8831a775550cf1e8338d6ca4a636a5ea7bec311b64874ab23e46a6de3ceeaeacc47aef8813fff4bfeb9ea328fffa38cf0e0bc9b789c216fe96b1a8255d1a3ead043f0de287b45d4a1fa8aa9433e7cd548877a2aa29cdc21c7366be3b1bd3d1f0e4ad9b606deec9fc7b4c1ec86e6812d195ea39d4933d4d131dccac4b94703b9356ada92ceda76299b79bcab413ad2941b44335e42712706beee3e0947210091d5be0649a84161ab2577f5a84374cfb16f93712aec31bc6d61d949a3ba21ce26810159bd72db23f1bdb7e2aef687f14b7058581ad8bf48e11e0e82cdb08ad24cea9aae0dddbd9359d81ed5c06f67a3e84b3b6d11c3fe0699542726bdf7fad51a406c48153d18bdb64612e08568875f7a390524dabc982c046614bcdf003ccf38335c7a13ea91b28cfbe479295287c23d76f624c640dd34ffae2dbb1a8ae2e36b18b67e0f6b0b9602f52a6a0c895c50a22c3a35d84f533958d3878100643489ef9d9674acfe9ea84fe2a47fc8a73ccade66061b10435ff5e68a073c6621596d00c6d965570c3c56935dcefe6471fd922140b681ed66a472c65dbe7667d19b044f8321fa7ddbb42096ded565bef913137a0adc606061a08ea514e2c6d13a344c8a883b0ddd846f1bfc60aaf550d79dfea9a98680ae59c0b501e7053a87bb1a2c64c5ec9c3e61c081c5d1faf3847e25f12ff602103dce91482c1ebb533eaadea479b84edfa5e0f804b5bb89be5204df657cb25d4f131c7396c013474c0e58b40447b4833fefe50579c30ab6d8cb0437db8a7aac5e360db4614a9cc2988000ddbf539e0df63c72ca54c89a34e5f8b1169f0394bcdba71aaf4cccb8a2b58ca2e68b592546b18b291e71bc81aa51db63de8331ae50a82af57339cc344d12638782279716150e9c50429be4a07449cc65d4e65df18364edf33dac400e7851444615e872654194aa58ac8924c0e857b9a64e704cd70d4cad0ab7d5e7cd4ab9176c263221b4e482674f5e404659e6cf5db7bb5165d93bd8471159404dd92b6fbe97eb57341474294f78dfea507ba3b07bc28dae47b9094aeeaf98d730a40ff43ab58ec7c6ee0c5bb88f204c7d940463a6a37a80140d3979bbe79d65668ef52d6873d2f5f67e1c1ab1ee40754477f5f642864a0f84901c9e08af3de697d18d849955e684b61518aa2bf3a11e39596282f7f7b4c60a9f0b1fca2a8963b8ffb0f2ddf39620ef6fecc208bfd86592dfa9382e13f260b45e5a216e135512d7d14e8952083306c68e287492cca7f035a0bd6664eb59bfae8d4adb4f7985424a126b9ed4bf493fff146f82dfe98930917a6874eaa096b804ac9b29d40d82055cac41e8cbfe302e0de34bba3b4ba307b89c3d03605437049837d004d5b73544ca5d965cf0a714cc283f4e82d48377fc9e1cc79fd1bc3a0ca7eaa6518ff3fba6480ee21b8216c6dd3169b37716a2c02fa60609befd5dc8f8d2934e6cbd690dd551506ae59ddaeff5185f1b06fe2af389c61184460506728c9f7d0eba6482a3426c59b28da15cb2bed5713c4affd920f3b882d51202bf47067ac8255678cd4bcd3cf4bca13dc6ac2e8e496ea0f0c22f3f1f32ae12f7ad5902d34caeffee8c469878da1ba780d2283a15379e4a06639d281d9eaa199d99e3cd8162dc5e82572de29cf8393d6732aabd5dac83774e19de5ddc7ef8645feb5e4cd4bbe006ad8f2645f9443ff517c12bffed5b5e2642e27f4e96f6fe2d5caa8161dc6e9b76afae756f3bf5be909af28bce2aad366c55185329f54ea762b2c59d72bdbba43c86122fb7fb167e0bd5f794ac61e97f50ba3c7d10672066abc1d08713a44eb66081de78b7ece0cf212b239ffabdb725a5ac1ba9543f482fc89d593c45de44275228476b4152f17132ede05da69113965e33446cf3be001a3e402f0afa67debc2afa88a061a7c8871fc781771df47713edd5a909b96131686344a856b03bb7b32a988e2795be04601696daa35f80ef5760de2ef19b106ed06e3ddae1acda31d596f9345a3509ab13337f741ea9e2aa1d08522365574c0f8b31351c08a54c58bc5da1d77d875d9d61d657e60c3dbcb17df8c675e4c925a27c5e191a21d04e477ccc49a805571fe57050359fa147fff4e33e3357aeab1fe95c138bf4b22a4b758885e5ea5a9d3c50dd7c11fc058c871d4e74160f42c132638b58ac7cafa9590d03536e4c41c9bcb9193299f20e94f6eff8f1ac34e6314429f42f85522838228dcbfb6ce16063a1c5a5107fb21554752cd70bd59044095e2a8152ff17ed0591476526422eeab502a02bac45170c4c642b45d2cdbab85667b187746d907a59b132d3d146e37e6b19cc26f63e34ad6f0f46cea1558c17fda7325a651d095742dc9fa9cbf381715df4c2ec81cae089b71e067cc5701a3812b7eecd15e2c68a996207f095c5ade0925c08a0b907d13a86eebb09bd1fd1069cca0ba06983b0f8ef8a6ba15c751d0e5d93414a0d3031544717ec81832fd6d022e5ba0f1dea196d22bacc536585514a3b935926b35626a20fc6deecd69fb448371c34c53d576048da387723ebf34c554c056268a329c86c9cf4b7235635ed8ad8c0bad675dd1b53db039266a89011a42226f2ca9f12011042e568ea1113b00b55b2493857e60d24c31029595d1e05583f1fcc26674a83c45eef00981f62cf3f41d5794bed7cdc2aa08b1a8bc7b14662a54736e2a2980d9b3800d6e88ffce037adb33994b44f6a8a8ba33698e6f8c0dd7aff287538557abff85662eded0060753f6e0ef13cb0c5daf185da31675e208bdfeb3efe949769d47f0085e5d63ecf5741d3b46bf5515e91663ea1e5a24b4766b4a13a123734370089ded1dc8f8b76a81ecc73af77d811ee3e78fd737ac78a0bd9ddf8ed7e8208c34fccd7c4a598eab8863b1e8a6bcf6edbfe68732c9eae0d4b95c47e0b1d1363ae059bb66ffa51d8058aee71c071cd4ba8bad471736cfe3b349ace410b1c158e6343cfe6c099f04eccb41b83165683c42b6bb86deecffb7e5d37b69fc54a53fb89bbe05e9d7f6c60c68aa2ab24d2d3fa2d1d5bf253f65ba498fc0afeabe5df7b712190840c27fc9777b6cf4b566804c035bdb5ccd245615d53e973585a047654cf0fa87a327e773cca2ba5808b64503270413fcb99300beb1587df99ab3643bd123f1cdbacff221686e38162b36c3511c395a1e4572cc9ad2a711dfaba9a29febda0acfd533b2e53451df6fbaf3f309b79dd1978adc000fcd49cd1a8f56a6851c90c34f5c2f394ff9cc3b89b1ed0350c922557cd6d8a43797d148eebc7824d09e5baa972303c6fa49a159164e79ede1c5328713d02e5075035a8cc288ef0b31192c0976604a343ce6e1a54cd5ee52572b12e10135c45fb3a7a500d32467c8d35d3e23aa5347e8433a5696c7bcd2cbaacd5c223143a90cbb1accbed0b4e4eab409721d48f4899d3d68d59a6e16488f1335674b3f72cac39a0b9aea999da787925131b26afede6056cb30632aba04001ab27df2901d75073df7be9f7cbe7c5f814916f51c7dafbff4b3cfaf12b7718127e6d9d5998935e4584bbce2a74155b69c049c47c8a74441d015addaaa2befa04b47a60d745d45bfbfbde34366c23f4a9f083d0400755ae20862c42abd2e5a63033535ed6666d211410df7802a73fa64a197b92ab3d93ac59aacb40c8fad128d0de60146c8f147b73c6694b4fa3ac2bc5ee96220a4dcc9e5baf7ef22c7ba0571291400bbe1ae0cc2d5fa83c13323be0edf8b27df5d4c8e520b3c0b57e87ae05db59243c655743e28bcfc979d77798e08068a26178930e8c78c14c8b4dbd8d0b9a53fb7ba347fc46d508715baaa1fd7a176487166b84911ceaf654c521cfe06e3c9480db79057fd96452a46995f7f6043b9b57082dc68133b14a5a2e852caecbc02531ed51a5be26a0883747e9ad01569383affe1165b09ff5bd3b8b0970dc1a2b9f8e0f914ecfd5a160eade2604a7255ed3b422eb19b45b98b62773b4b1d084372a31c39be9376199360e0bdc471929634272602a73658f379b0460eab61364c80dbf2d87026a5d59842be94b83950b179e8f1d01bfba42deb8e46036fed2ecb73fcbbfaaa80ddd8b204c50ab11e608b8eb9d8501710e85cbba1360d7221270ed701e0a3b636f1c6eadc85f914619eb1fb103ddbe9593a39725d56aeebf1666fce38113ae8b7805ecae7a18b3ccae302d2d1492d1a7fb30153322c619099722fcc8829739b7ca9c4765566207684c6da40086cb80bd73f41d19bc10d55314b0a1015d8a1c68574ce55e163729c36b5a0c6747067c9a4f920d3de1ee295e260299ea0863f54e01fa30af6be514e3f9553f3eaaa4af7f34d54254672d79d644b8c076b2ed34b27a382b04902f4fac87c898c889838b66e526bcd620ff27436f2ba7c0efcbf8cdd1ab13e3692ed4f0017d2511d22ba7fb46775ea461c68bfa8d99bf91ff6652e61bb64ebcfd2acc6ae38cdd4b101bb700562e53b762e82380c8164c0c3a63fb6e9222969b32161806d86c9a6912c947df0fc8c739fe914a726efac97fd5705cc3011779f061251e8aeadc5593159b616b29c3b56b9096846423c0c16d38d2bdc274189fbd6f360854ea851baf36887c02acfb40182ad4e9a57e17b6c84cfc22c49fffc3e68393986e33a5195372d62d1af4d01e31e963e4a6cf05ae07d2fa5e68e114aa7e898c8026d84d67110063e8965aecf095748db4f54235e9c01a23aa1f589927e6be0d157fda8044278ee0b3b5e62b827523254bfe6857eddab5eb39499d85bef41e1a9c38aa02af47bf0121b96dc7685f6e62afb10a3d1cb311737a77c0f7d8497287db331fec7d73c4da800741a46c6620a1ecacef1ab70f0eabf4ee71ff6461c33f2f3cba2b68be7c54e750fdd9cdab0c1cdc2b6b906a498699dbb23c594ce3133a24df7d8689488ce7301705efd05e509813f167921c1142c0336f48b4f3f1bc3bb86a7cecac5ef23a53cc483fd2b31e36581ad5c80539b971ebeb2f1b991867cc2b03908dd8caa5fb81c668272599416252aed53098aa7711619520d18e984a9d2092e6fc22c2aab4924998f647cd4492862749c505f9b84a2ba322a25256f78bf5f162e646709b9ae12e0375a2e40793603a208b9191b19b491b02db8998bc5ce8b74874cf34e1228578ebaac390d24768c23b33eca7abb44f33a3ae76c44483569906496bc757c0f2af4d134c4f66fc6e2febe0532060f98cfa4f7ca90c95705e746587e340929a02ea152ec59550fa829e6851fc588a6522c90c11bd26d9d10ced9890b24c652e9522299b0daeb9af24a2793d2878aedfdd4bcd549ccd792cf3077e34ed2c3d09c0999d9c6c66e9efcc8080b8e8e6c2fda8e5eeeedb14c9264d2077603118030150fba3e65587b9a23e99fe5a0dbe3b02ce92ddd22786ce6ffd3d7b3ac3ae35d88c8b68d64d1f2ecf0", @typed={0x8, 0x73, 0x0, 0x0, @fd}]}, 0x157c}, {&(0x7f0000008000)={0x3284, 0x1c, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@generic="452ea4acffd2f26db834e985dce7ce8b37a1d8b6f17b1aa18889f0b119b48557aab293648225a94e67c54cbed7e44aa628858de12d7f76ec5256e8a207", @nested={0x108e, 0x11, 0x0, 0x1, [@generic="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", @typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@local}, @generic="2667e0f9a9cd469b405330cded9f89543636b2984ff97b82de4cf21b0b14ff1d0421dd2e9fae9b70b77136c60f1e91ca01b14086443b875dd545b7e2e5", @generic="98d59b142a750dd6f4f1f5374b7924ebe455ecf313466f16fcf8c8707e1d3c5ff3060f74937fe5f933c6bfd899a844784e13f1d5c4ffc1fac3572e34c9768994d6c21b8d9a"]}, @typed={0xd, 0x2c, 0x0, 0x0, @str='+{/\'\xc9,+@\x00'}, @typed={0xc, 0x77, 0x0, 0x0, @u64=0x6ae4}, @generic="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", @generic="20595f1716d7b18f5e6f5e84011cda7c72c62b57e772429d1a260580910286ba1b290167c4e0f2a37fe5770d", @typed={0x32, 0x8b, 0x0, 0x0, @binary="21a12b00426e27791c1b60f5eecae5893a4aec22894a4274cb38f7d57edfcad0ad1053898fde6abe6b3b0791b11b"}, @generic="e5f6f5f2c1bc9de9454e692fe3c714160012eef9477537fc1bf96ba6210ad3506885512205656e12608b9a11270b663c6b765fbc21cf31058e28d241a74ce9c5215e86da62cef24a092ad3319c706cf5034824aeb3dafe42421ac4127e54fd7a4ce9ad2f7fa3572c11f32e4f150611ddfe87841aaa060ee38b5f5fb4a776273f689aea4a9c81a1527340478a242645fa9aa3ac2c415c1cbaea2876ad865c66e77132e509fd62ef41dcb46efd96aeef4318a876f45ac88306cef59732122b550afa52312f71e8956b96460bbaf830905fcd80a723e8e1cf1da71caf7fd89cbe22b50d9ea2c212e862079903eebcafc8ae107684a7bb328a45776b4fbabaadbfc36b466232fd543db804bab5020dd2ab11d832a942516e9dfca45f392c157dcc04af7a22397aa36b725ec8371eca1d5ddcf7e9aec1a72b157216ee51fdb67edc8bf55164cbc0438dbff4e968cf3ea5c311cd0cc503c413eff1044d1e202aef465ed47b4bcb4ceb03ce2b647b7fe4a026e643ba7d248354ab5e15f1c2e422057b75fed3e46dd5d4648e17c8551368c5cb5c3e7f1c19a6074a2b02eeaa4ea9ae2f431e936f306afd1f1783e98502d078ac3667fe4dd916ce68215be9fb1b2ccd9ee4d8a043994b44cce5d3b7f605a40224e9813187ee752e51b7155f06c074a57260d2a236ceb56abcc21df7e7d7766b94564fd566fdb9d8e99af266096273becba32a833db0ffa2a5cce29292553b4baf457d876f6499c1352f5c849f2c0fa48821f9f722fb448c5006facc8d5bce407e0e73d7f43e55da99593c44527169b73fe626395e79f99e009351e1befe0e0a086c69600fcf07c7d53fdaef1c3a45f893a907c2fe86bf61fc353f6d7c02e73f064671c274934083e81ec8960b9d89b8f08f6c95dd828af1670ceaaf02eaf08942e7ec5e8f053d06daf3b6ea0afd5f528aedbbc45a7ee898515356d62046bf15a4328b4341230a6940623148fb0457cdf2f81f142ecd7d6dfb7a148a3811213daa9d6b5dbaee9f59285744326c9e7bcc418c836b7b23701680c5f85ce92be7baa00d047fce772ad125a6ea93a56d34dc52058934de635fa91ac54f60649f106201e44ba177977982a873c179c4a4809056a998afb7e04d2e2ccc76683e985ca00456a2a11a0adc13aaf823aa4b66f88d62331b1179b6503e3da1f240330f2131654f5dabe119ac83e378ffa19c78abcdcd74b2cc920d244480d9f990f12a0cf00a6bdcb10550f55d5ea194799a927fb444b5c193fcef37abf647e6ffb4d5bae695e8791b5684ae9f637efa3bacb969cd14373850294f49cbc6cedc1fba48a2236358f980c81e92d88a55a174f64b35067478aed70e8e0e0d376bc6acc7e0a47db435b39c39b12128cc106bd76f5b179db3a9704fcb90c303e740209a45d4634728800ca085212bbb4282b3a2aa93da16febfa073af39754ae8a8906f9676e5e013ba04d60ef431c8ca76af4a7b906daf46d9858f3ac3dc45687b2bb87e69a6a479d7db1f9d2c0f9fe6412b7c29b33dcf00d6f8d96fcf7599d5c7ef0a81c1d28ce4b109820f338f3ad92f07fca2a6cdedd490d39a5ce0bc5150c60a91f7d7c45b134bfb21312bce5974dd5e99bc01ce95110462feac49dc4563596d22d469d3fdc2b78cb5d251c9d005328b39711d8cfacdbb22d7954f23ae33b55fb83abbc371397e97481f31171e0aa1bdf959ff4135cc6a1bf806887f8f0dc9c31e76de8a3b4ce63b236a4f12f72bff01d1495099950d21cb901fc3a38934b6c06dc25fe459849f07ff5509979df69e2b2a98a527ed35e345661f6eba7d0f9858d4e96aa97e498a02e296b9a2b6ac19f08c74ee43d8d833ce32a38b622c43df00e75b9dce184cb2373f7ed91c049dadae9857fa35e831fc4256430e439064de9e14a7106edddc0456c7519aa19b40c05b9578b59e24926de6e7e56fdcaa00288f6b9bb309ced120314a31d56365c5123fcf3577671a05abfab2027f5afb25ea459d3119a1d3ebb4a57d09895c863e8603b889cdf63631dec9066c22900771f773bf49924ff24a2a6703f041d207263256fc31e68891e5ec4b2955447697f80331af2365ef4ca1a81c2048fce5de30a2425eb0f692cef10e793712a1fb083e12ffb6a704372e7d863d2115cd6306072ef26d272b2df990bdef314e9ed45d6bd3bde5733bc88a452e640d84b14644d2b00d4f1f1f701df7f7611170a5c7da2173c6b86c186bf80e8bcf08e4c5b32f3daeb66f42733a81c1bd0202d041dd0344bd48f36dba425e683d9cc8786ec98513188149a882276c9c7d770500c6e58943d030f20b5d95b1de9744f5dc1738a720af720afb096250a856af6b0d0d1acce1f0cabe38dc1ce1f2e0cb98df111e403d50666e516fe9a1a9e48d154c7f23324e2e91847a5b59dae83a60d939fc5d693679f41565167f23821dc4c3e4ad9322cd31c34dd3f5419cdce10d7c54239dea74579dedb0f2fb015003a6c969254249379ec517c783f454867dc44b89dc72003bca4c71d433fe04ea9f5dd271387c96bc67e72d28eb9d677827060f6365bddeff29cc16e4b57094f560276a950341540e96ce842da95bbd03321acb60829cf3da2345100806ae791ad91cefcb874ee8e6fe1c79cf27ccbf20c9bc580b67ded4a16fe8e09994a87741ada3bc3632ebd81e6cec6bb3510071f69f600ebfa37d92a3345ca4e04f366ee4adc9e7803f447b862096cea8c921af02df962d452a11b8798f8921b96ec54ede35370ea622a2831fdb650e7fbf4cc5a500abdeb0ee1a63f2aac3093a1880ec48ce22454815a65d91c6e490c96ee55143b468f698471258350d00f9c53b104647d7940ffbae1fc3d4baf4ce0751c5e6b6f680b053c6ab80cf3a564ee4beba26325083316e19e3e4f8ae8995032326482f51a34e14443fa2c813631813b17c8353c3515b53d9fdb6e230d8f07cd301113c11816f677ae271f751f57f7bbf784ccb7d6a2c6d5b8bda05dad9ec143f352bff57fa31bd2f8e5616d86b44a4fc215d7d10fb0bf6e0c44aa85f545c1b611eeea6a5bb276d7d77be882bbb0c8a246ef76858b0d0b3867e9e0569ecc9bd4c4844fab4b5aead346e812a3d90d941e24be36c05e2666e232e5675c183f6dcfccc2e8b7bfdaf7d6fa7b59ba1240d91a72ce9431d05aca596775d33229cce67d0ca5f838cc3fe5d81bdc70c04d1e0992cbf8da7f3207603b313f349ffcc39d5e21c0227126f73211aef5c133b29453df0f26fca430bcd2f76f9faae61bfd0aa3e99a2609329bd2dcb831a5decc4efab8347a965f41587fba7670dd48c61370e554d59646140a67ff1c3720d801e89e277d55215e3daeb94a9c3190fbc68bd036f13ffca8fc9f308e05cc6a5524bae2013441fcb5c2a6c6a39c54bbdfd05942f42639985831f5e70b4bec473757539118cf6134fcd10502baed1855557b0e8b5e5e1722a822410534f7958c24a79f5d06bc5621e17a48136fc1c547f46b65f000ea26bac295deecd4df8d0c55ea21c8a84730edc2e3733e26948c522880cd85f91182289a32bc54f22281a9290c77c1e9d3faf0d4d74443ea1fc43e7a3d379aabbdcc26d3d2166a0156b8d82d22186a79a30fa375e211695c39d0e37794aa8048ab6986f7522bcbb49d9eca5716afae92a2ae17083d972d3d42915e0427c8d5e91d48a5dcdeaaece0d009c1ad48526721f9b9530f9703c549eb4982c014e25daa85d8b4895942db240299354660b4d7bbd95464f4ec0370decc454752ee74ed2465b73716eab3eb0a9dc8e5e21161945abc5b75cd6df73386e6aa1f44c65f10c129e3225d03d78cb0d20c8d64bd62ba72e31acf094af916cdf2a7f329b378e350597c4ba194861b0c552332deb8a5b5b216b207ca83454ce9297a02f1ababe7ea9721ab49756a4b05a28d0f1dd9496fcce89807b3974de4bcec12e847f5a84c966e23964c2fb2179ac232681777c155cf59e48c750a39089ce6be14e06c9fe8273c9bc75350d9f863d7939af5c87db4f3174fab57521c85233a70d0e4240d2cab489ae6d348236f3909b3519b12216ba1d1f7c7e7e43ee61e201499be70d5b098f22c2a7a06c925644fbc8d355468c16cc1828cf5463c4a4ab3bd7f41337b58b145ff6da780bee0391062241391e93d219efc16786f5a7e617b7b01abf58256e920429189d7c5f64fbe0772112d54869e264b316ffbbd1218f2730853f08d99abb2efc3cb988b871c9a5cfd17d4a57a179256221e485b39a76101031337fb99dbfbbf0a49c06a5088c560a15a553cb4a74bdc1e8c5e8815382df7e27a1c64a7bdd40b3039f4ac82ec5268379fe742aef8ec800500844321d9501a26d38d77c23fe614b72243e71dd819e3140f1225482f681a5eaac68f008ce039bc1bb35e66d6854fe9ee03a71eb7b4e3a9dd6be5e70096396fbe179c0d7f0d483d9ed2acdd196df8cba9fe4e403cd6f841cbd6db5f63a895921c9b70255f45233411efe4b17cc65879df2101e0e7d97e0495f0d21dfb6f5d079b3ebdec32da6e664bec77c24a7a44d8f5235c4b5e6b3d285a0e6ca440a27352288d9d1fe19940d797038aff1c66dad49ab2d6e124a237b96908c849630027d4afdf196a4361d1afeb9cc1c9dfded96d0cc22355d77046e31474cc565627618c7830f3e13732e4b577b9760dee9a7e292253db38f734bb6c9fdcc6e79ad8a3048b331b7a75845591fb08ca92f8652831a9969f5f770c92f8ef894329e8f1fddf3a6780c047421ce4bfaafa1fef510353c4051194a319ff478565231b4f6e8cf3713bf863fadaad2b9f85a87c45243c859f703f26dfa1755fb550286c26fdea6dd5e306db26faebe8ae6bbef28bff6ff8f2e683d40ce2d028fc8f94e7d8cc71afcbfba6352b58aa6228931d8d569646305fce9de6f5f63c09887d48199442422cbd34096a6b6304eb993fbef5966cdcfd68f1a2f15f9e16863c0fd4f7c09ee3c01ad6fd1194d22188fce461898f627dcf656ecf527ab585f541d4c9f358cbe551dc674084c14271f2d896cba586a8c8eb543e2743af4ea505e2cc30042439dbee24ef75e42b6a4d0f6d1d76729a7a9c7ead06ca3804d2817d769072e2355e974679f4c046c0780fa620db232f25980c379fa4c81995a7f37739ec6fa15bbb7f9fa24c2a49b2aafc6953fa0ce0ff5aaec6e82dbed4b663023d12e224a168d5393d09e2920886e9d848ed2d2268524bb51cb1bcf0dee51a0eeafad3a3ee6aa64e0acf71e710c4369efbec4af66b6d18a65fb3731a6dfa0f0287ce1e8a1e2390060447ebcc0ce43e33cadc254a61779d1dec2afb74464163a4d0c2748f12ae3c0ee998d927023682c2386610c151be1918c2f12cb7d4fb12e6b779cef25cf8ec6a18fe134af22ce92bd1d1c997147dada4ea7528a29efffe6acbf1354b1c480a0af178e14e08dce0164c196dcb5c7b0f1e7690fbc09a966323a6183556d972c25f4c4db6711d99e6827d0a486a42b10ebba418ad4aa7b7175b242afd2189469724746893860f4c7a5d6b20affa5e4bc9d491e37d85118e7e079c461ad197b9a26f2a09f39834691c050d35ed852d069106d2d3a932091519e2b7d220570b5a401aef84427d382101febe95f4e3833f6dfa021fd1169a3ab37e24510f6645d9fa0c278bbbd70538973aa20d769acf425015957477129bae599de91af491716f61fae3cf21d6ab312d4c433c81670b020e24f1c02cbd23f516bbcec80af89a1e2fc8e4cea761d33da5850f5a975c48f34f2cb9d78c0a30e858e2a45f19d33b56bfda521e8", @typed={0x95, 0x24, 0x0, 0x0, @binary="4f763f32be2ada6f376424bfe558beb5ecf294d8e1d657cb7ec109a79cee63be091b4ab0d08fbc32fdbc441d44bc31ea650980b59320bea390a33baf6a2a8221f8278b29fd7354df180303760a41e9817b7f9816961b08bcb8d74a9bc9d7c1256110c30c43bad06fa898badb8cfba7badd780c7a3f0028124c00392f54f7ca36687ba844c5c02e0247928ab05a64f4ebef"}, @generic="5272cc22e5de0659078b0f4453a809d784ac44d843217f3a47b9d1f88168f998586a27b063d5cf3bd147eac90c000cbb530184726e06fc1a15018e473b73d715a94029819be7655a2c48f8c57d9055be2303d432dd4b57fe8f95374a59398ee7f1c13bec9997b5ac8649bf55d92c4d481a6c5bc788ac2d91d880e904d1a3e1930792bdc630d4013a4f421c05605531878537f5"]}, 0x3284}], 0x9, &(0x7f000000b440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r9, r0, r10, r11, 0xffffffffffffffff]}}], 0x58, 0x20000004}, 0x4) sendmsg$netlink(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r8}}}], 0x20}, 0x0) [ 423.842782][ T4099] loop1: p2 p3 p4 [ 423.847055][ T4099] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 423.857144][ T4100] loop5: detected capacity change from 0 to 6 [ 423.865693][ T4100] FAT-fs (loop5): bogus logical sector size 3328 [ 423.872072][ T4100] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000e0001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xfffffdff, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 423.885536][ T4117] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 423.893562][ T4117] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 423.894098][ T4099] loop1: p3 start 225 is beyond EOD, truncated [ 423.910861][ T4099] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 423.922260][ T4117] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 423.930288][ T4117] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 423.968481][ T4134] FAULT_INJECTION: forcing a failure. [ 423.968481][ T4134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.981607][ T4134] CPU: 1 PID: 4134 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 423.991679][ T4134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.001772][ T4134] Call Trace: [ 424.005069][ T4134] dump_stack+0x137/0x19d [ 424.009449][ T4134] should_fail+0x23c/0x250 [ 424.013873][ T4134] should_fail_usercopy+0x16/0x20 [ 424.018895][ T4134] _copy_to_iter+0x17c/0xdd0 [ 424.023483][ T4134] ? finish_task_switch+0xce/0x290 [ 424.028606][ T4134] ? check_stack_object+0x61/0x70 [ 424.033643][ T4134] ? __virt_addr_valid+0x15a/0x1a0 [ 424.038764][ T4134] ? __check_object_size+0x253/0x310 [ 424.044173][ T4134] simple_copy_to_iter+0x4c/0x60 [ 424.049139][ T4134] ? skb_copy_datagram_iter+0xc0/0xc0 [ 424.054516][ T4134] __skb_datagram_iter+0xac/0x520 [ 424.059631][ T4134] ? ___cache_free+0x3c/0x300 [ 424.064365][ T4134] ? kfree+0xf0/0x1d0 [ 424.068347][ T4134] ? __kfree_skb+0xfe/0x150 [ 424.073015][ T4134] skb_copy_datagram_iter+0x39/0xc0 [ 424.078573][ T4134] unix_stream_read_actor+0x40/0x60 [ 424.083908][ T4134] unix_stream_read_generic+0x691/0x1260 [ 424.089725][ T4134] unix_stream_recvmsg+0x63/0x90 [ 424.094678][ T4134] ? init_peercred+0x180/0x180 [ 424.099439][ T4134] ? unix_stream_sendmsg+0xa90/0xa90 [ 424.104907][ T4134] ____sys_recvmsg+0x15d/0x310 [ 424.109700][ T4134] ? __import_iovec+0x1ff/0x270 [ 424.115727][ T4134] ? import_iovec+0x69/0x80 [ 424.120244][ T4134] do_recvmmsg+0x34c/0x9e0 [ 424.124957][ T4134] ? do_anonymous_page+0x411/0x8b0 [ 424.131392][ T4134] ? fsnotify_perm+0x59/0x2e0 [ 424.136142][ T4134] ? __fsnotify_parent+0x32f/0x430 [ 424.141328][ T4134] ? __fget_light+0x21b/0x260 [ 424.146077][ T4134] ? __cond_resched+0x11/0x40 [ 424.151047][ T4134] __x64_sys_recvmmsg+0xcf/0x150 [ 424.156171][ T4134] ? exit_to_user_mode_prepare+0x65/0x190 [ 424.162938][ T4134] do_syscall_64+0x4a/0x90 [ 424.167421][ T4134] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 424.173328][ T4134] RIP: 0033:0x4665d9 [ 424.177438][ T4134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 424.197142][ T4134] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 424.205584][ T4134] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 424.213643][ T4134] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 424.221691][ T4134] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 424.229662][ T4134] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 424.237787][ T4134] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 424.276353][ T4138] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 424.284408][ T4138] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 424.301316][ T4141] loop5: detected capacity change from 0 to 6 [ 424.314631][ T4141] FAT-fs (loop5): bogus logical sector size 3584 [ 424.321007][ T4141] FAT-fs (loop5): Can't find a valid FAT filesystem [ 424.323126][ T4099] loop1: detected capacity change from 0 to 1 [ 424.345957][ T4141] loop5: detected capacity change from 0 to 6 [ 424.384542][ T4141] FAT-fs (loop5): bogus logical sector size 3584 [ 424.388979][ T4099] loop1: p2 p3 p4 [ 424.391181][ T4141] FAT-fs (loop5): Can't find a valid FAT filesystem [ 424.395040][ T4099] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 424.409680][ T4099] loop1: p3 start 225 is beyond EOD, truncated [ 424.416170][ T4099] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:50 executing program 2 (fault-call:8 fault-nth:52): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:50 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x80008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x8b84f9fb236e64ad, 0x80, 0x28, 0x0, 0x20, 0x1f, 0x0, 0x2, 0x4200, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1, 0x6, 0x9, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240)={0x4, 0xffffbffe, 0x0, 0x3, 0x1000}, 0x14) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x1, 0xff, 0x7f, 0x20, 0x0, 0x20, 0x800, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x3, 0x1f}, 0x8400, 0x4, 0x1000, 0x9, 0x3f, 0x5, 0x0, 0x0, 0xc973, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0xa) clone(0x3805ab00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000418000/0x4000)=nil, 0x4000, 0x3) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x41) io_setup(0x202, &(0x7f0000000200)=0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1000000000000000, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a000000}]) io_submit(0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) mlock2(&(0x7f000052a000/0x1000)=nil, 0x1000, 0x1) r4 = openat(r3, &(0x7f0000000300)='./bus\x00', 0x458000, 0x81) r5 = syz_open_pts(r1, 0x2d0901) sendfile(r4, r5, &(0x7f0000000340)=0x8, 0xe53) socket$inet6(0xa, 0x80007, 0x2) 09:48:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xffffff7f, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1b3ae8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:50 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000f80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400100001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xffffff8c, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xffffffda, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400110001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 424.638080][ T4176] loop5: detected capacity change from 0 to 6 [ 424.653166][ T4176] FAT-fs (loop5): bogus sectors per cluster 0 [ 424.659293][ T4176] FAT-fs (loop5): Can't find a valid FAT filesystem [ 424.666545][ T4180] loop1: detected capacity change from 0 to 1 09:48:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xffffffe5, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 424.718567][ T4180] loop1: p2 p3 p4 [ 424.723322][ T4180] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 424.744123][ T4180] loop1: p3 start 225 is beyond EOD, truncated [ 424.750335][ T4180] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 424.759557][ T4203] loop5: detected capacity change from 0 to 6 09:48:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 424.773153][ T4203] FAT-fs (loop5): bogus logical sector size 4352 [ 424.779546][ T4203] FAT-fs (loop5): Can't find a valid FAT filesystem [ 424.822876][ T4215] FAULT_INJECTION: forcing a failure. [ 424.822876][ T4215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.836141][ T4215] CPU: 1 PID: 4215 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 424.846289][ T4215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.857094][ T4215] Call Trace: [ 424.860448][ T4215] dump_stack+0x137/0x19d [ 424.864807][ T4215] should_fail+0x23c/0x250 [ 424.869222][ T4215] should_fail_usercopy+0x16/0x20 [ 424.874346][ T4215] _copy_to_iter+0x17c/0xdd0 [ 424.878940][ T4215] ? finish_task_switch+0xce/0x290 [ 424.884111][ T4215] ? check_stack_object+0x61/0x70 [ 424.889205][ T4215] ? __virt_addr_valid+0x15a/0x1a0 [ 424.894337][ T4215] ? __check_object_size+0x253/0x310 [ 424.899653][ T4215] simple_copy_to_iter+0x4c/0x60 [ 424.904761][ T4215] __skb_datagram_iter+0x23c/0x520 [ 424.909877][ T4215] ? skb_copy_datagram_iter+0xc0/0xc0 [ 424.915326][ T4215] skb_copy_datagram_iter+0x39/0xc0 [ 424.920596][ T4215] unix_stream_read_actor+0x40/0x60 [ 424.925799][ T4215] unix_stream_read_generic+0x691/0x1260 [ 424.931659][ T4215] unix_stream_recvmsg+0x63/0x90 [ 424.936615][ T4215] ? init_peercred+0x180/0x180 [ 424.941834][ T4215] ? unix_stream_sendmsg+0xa90/0xa90 [ 424.947240][ T4215] ____sys_recvmsg+0x15d/0x310 [ 424.952133][ T4215] ? __import_iovec+0x1ff/0x270 [ 424.957082][ T4215] ? import_iovec+0x69/0x80 [ 424.961621][ T4215] do_recvmmsg+0x34c/0x9e0 [ 424.966143][ T4215] ? do_anonymous_page+0x411/0x8b0 [ 424.971366][ T4215] ? fsnotify_perm+0x59/0x2e0 [ 424.976069][ T4215] ? __fsnotify_parent+0x32f/0x430 [ 424.981326][ T4215] ? __fget_light+0x21b/0x260 [ 424.986293][ T4215] ? __cond_resched+0x11/0x40 [ 424.990987][ T4215] __x64_sys_recvmmsg+0xcf/0x150 [ 424.995948][ T4215] ? exit_to_user_mode_prepare+0x65/0x190 [ 425.001848][ T4215] do_syscall_64+0x4a/0x90 [ 425.006277][ T4215] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 425.012176][ T4215] RIP: 0033:0x4665d9 [ 425.016152][ T4215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 425.035963][ T4215] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 425.044407][ T4215] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 425.052561][ T4215] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 425.060558][ T4215] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 425.068532][ T4215] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 425.076503][ T4215] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 425.103980][ T4180] loop1: detected capacity change from 0 to 1 [ 425.138703][ T4216] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 425.146948][ T4216] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 425.165668][ T1032] loop1: p2 p3 p4 [ 425.170240][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 425.179102][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 425.185316][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 425.195691][ T4216] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 425.203763][ T4216] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 425.224916][ T4180] loop1: p2 p3 p4 [ 425.228777][ T4180] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 425.247768][ T4180] loop1: p3 start 225 is beyond EOD, truncated [ 425.253989][ T4180] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 425.269821][ T4218] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 425.278039][ T4218] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 425.301701][ T4218] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 425.309987][ T4218] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 09:48:51 executing program 2 (fault-call:8 fault-nth:53): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:51 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x80008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x8b84f9fb236e64ad, 0x80, 0x28, 0x0, 0x20, 0x1f, 0x0, 0x2, 0x4200, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1, 0x6, 0x9, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240)={0x4, 0xffffbffe, 0x0, 0x3, 0x1000}, 0x14) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x1, 0xff, 0x7f, 0x20, 0x0, 0x20, 0x800, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x3, 0x1f}, 0x8400, 0x4, 0x1000, 0x9, 0x3f, 0x5, 0x0, 0x0, 0xc973, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0xa) clone(0x3805ab00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000418000/0x4000)=nil, 0x4000, 0x3) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x41) io_setup(0x202, &(0x7f0000000200)=0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1000000000000000, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a000000}]) io_submit(0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) mlock2(&(0x7f000052a000/0x1000)=nil, 0x1000, 0x1) r4 = openat(r3, &(0x7f0000000300)='./bus\x00', 0x458000, 0x81) r5 = syz_open_pts(r1, 0x2d0901) sendfile(r4, r5, &(0x7f0000000340)=0x8, 0xe53) socket$inet6(0xa, 0x80007, 0x2) 09:48:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400120001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xfffffff0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:51 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03001180000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 425.629628][ T4253] loop1: detected capacity change from 0 to 1 [ 425.636109][ T4254] loop5: detected capacity change from 0 to 6 09:48:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xfffffff6, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 425.670333][ T4258] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 425.678466][ T4258] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 425.693491][ T4253] loop1: p2 p3 p4 [ 425.697735][ T4242] FAULT_INJECTION: forcing a failure. [ 425.697735][ T4242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.710808][ T4242] CPU: 1 PID: 4242 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 425.720881][ T4242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.731001][ T4242] Call Trace: [ 425.734339][ T4242] dump_stack+0x137/0x19d [ 425.738730][ T4242] should_fail+0x23c/0x250 [ 425.743157][ T4242] should_fail_usercopy+0x16/0x20 [ 425.748179][ T4242] _copy_to_iter+0x17c/0xdd0 [ 425.752771][ T4242] ? check_stack_object+0x61/0x70 [ 425.757810][ T4242] ? __virt_addr_valid+0x15a/0x1a0 [ 425.763022][ T4242] ? __check_object_size+0x253/0x310 [ 425.768334][ T4242] simple_copy_to_iter+0x4c/0x60 [ 425.772749][ T4258] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 425.773315][ T4242] ? skb_copy_datagram_iter+0xc0/0xc0 [ 425.781341][ T4258] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 425.786736][ T4242] __skb_datagram_iter+0xac/0x520 [ 425.802770][ T4242] ? ___cache_free+0x3c/0x300 [ 425.807469][ T4242] ? kfree+0xf0/0x1d0 [ 425.811485][ T4242] ? __kfree_skb+0xfe/0x150 [ 425.815991][ T4242] skb_copy_datagram_iter+0x39/0xc0 [ 425.821205][ T4242] unix_stream_read_actor+0x40/0x60 [ 425.826415][ T4242] unix_stream_read_generic+0x691/0x1260 [ 425.832051][ T4242] ? init_wait_entry+0x30/0x30 [ 425.836814][ T4242] unix_stream_recvmsg+0x63/0x90 [ 425.841785][ T4242] ? init_peercred+0x180/0x180 [ 425.846561][ T4242] ? unix_stream_sendmsg+0xa90/0xa90 [ 425.851873][ T4242] ____sys_recvmsg+0x15d/0x310 [ 425.856634][ T4242] ? __import_iovec+0x1ff/0x270 [ 425.861533][ T4242] ? import_iovec+0x69/0x80 [ 425.866044][ T4242] do_recvmmsg+0x34c/0x9e0 [ 425.870475][ T4242] ? do_anonymous_page+0x411/0x8b0 [ 425.875601][ T4242] ? fsnotify_perm+0x59/0x2e0 [ 425.880288][ T4242] ? __fsnotify_parent+0x32f/0x430 [ 425.885442][ T4242] ? __fget_light+0x21b/0x260 [ 425.890132][ T4242] ? __cond_resched+0x11/0x40 [ 425.894804][ T4242] __x64_sys_recvmmsg+0xcf/0x150 [ 425.899805][ T4242] ? exit_to_user_mode_prepare+0x65/0x190 [ 425.905629][ T4242] do_syscall_64+0x4a/0x90 [ 425.910062][ T4242] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 425.916066][ T4242] RIP: 0033:0x4665d9 [ 425.919962][ T4242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 425.939753][ T4242] RSP: 002b:00007f269420c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 425.948179][ T4242] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 425.956157][ T4242] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 425.964149][ T4242] RBP: 00007f269420c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 425.972149][ T4242] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 425.980132][ T4242] R13: 00007fff05d995ff R14: 00007f269420c300 R15: 0000000000022000 [ 425.989675][ T4253] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 426.007089][ T4253] loop1: p3 start 225 is beyond EOD, truncated [ 426.013365][ T4253] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xfffffffe, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 426.036548][ T4273] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 426.044717][ T4273] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 426.050816][ T4254] FAT-fs (loop5): bogus logical sector size 4608 [ 426.062272][ T4254] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:52 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03001280000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 426.106636][ T4254] loop5: detected capacity change from 0 to 6 [ 426.115374][ T4254] FAT-fs (loop5): bogus logical sector size 4608 [ 426.121745][ T4254] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040101000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 426.179921][ T4288] loop1: detected capacity change from 0 to 1 [ 426.243826][ T4288] loop1: p2 p3 p4 [ 426.252016][ T4288] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 426.263502][ T4300] loop5: detected capacity change from 0 to 6 [ 426.277268][ T4300] FAT-fs (loop5): bogus number of FAT sectors [ 426.283387][ T4300] FAT-fs (loop5): Can't find a valid FAT filesystem [ 426.290535][ T4288] loop1: p3 start 225 is beyond EOD, truncated [ 426.296763][ T4288] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:52 executing program 2 (fault-call:8 fault-nth:54): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 426.340499][ T4300] loop5: detected capacity change from 0 to 6 [ 426.347150][ T4300] FAT-fs (loop5): bogus number of FAT sectors [ 426.353424][ T4300] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:52 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x16004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbdbfebe06bf66024, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0xc) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000327000/0x2000)=nil, 0x2000, 0x2800004, 0x12, r3, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f00000000c0)) preadv(r0, &(0x7f0000000280), 0x0, 0x0, 0xfffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x101003, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x2) 09:48:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xedc000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:52 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03031280000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400011001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 426.492241][ T4325] loop1: detected capacity change from 0 to 1 [ 426.499236][ T4328] loop5: detected capacity change from 0 to 6 [ 426.511886][ T4328] FAT-fs (loop5): bogus logical sector size 256 [ 426.518182][ T4328] FAT-fs (loop5): Can't find a valid FAT filesystem [ 426.528113][ T4325] loop1: p2 p3 p4 [ 426.532401][ T4325] loop1: p2 size 1073872896 extends beyond EOD, truncated 09:48:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x1000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 426.539996][ T4325] loop1: p3 start 225 is beyond EOD, truncated [ 426.546222][ T4325] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 426.555734][ T4342] FAULT_INJECTION: forcing a failure. [ 426.555734][ T4342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.568926][ T4342] CPU: 0 PID: 4342 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 426.579002][ T4342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.589136][ T4342] Call Trace: [ 426.592415][ T4342] dump_stack+0x137/0x19d [ 426.596943][ T4342] should_fail+0x23c/0x250 [ 426.601524][ T4342] should_fail_usercopy+0x16/0x20 [ 426.606564][ T4342] _copy_to_iter+0x17c/0xdd0 [ 426.611180][ T4342] ? finish_task_switch+0xce/0x290 [ 426.616380][ T4342] ? check_stack_object+0x61/0x70 [ 426.621408][ T4342] ? __virt_addr_valid+0x15a/0x1a0 [ 426.626521][ T4342] ? __check_object_size+0x253/0x310 [ 426.631833][ T4342] simple_copy_to_iter+0x4c/0x60 [ 426.636849][ T4342] __skb_datagram_iter+0x23c/0x520 [ 426.641983][ T4342] ? skb_copy_datagram_iter+0xc0/0xc0 [ 426.647378][ T4342] skb_copy_datagram_iter+0x39/0xc0 [ 426.652581][ T4342] unix_stream_read_actor+0x40/0x60 [ 426.657784][ T4342] unix_stream_read_generic+0x691/0x1260 [ 426.663419][ T4342] unix_stream_recvmsg+0x63/0x90 [ 426.668369][ T4342] ? init_peercred+0x180/0x180 [ 426.673233][ T4342] ? unix_stream_sendmsg+0xa90/0xa90 [ 426.678527][ T4342] ____sys_recvmsg+0x15d/0x310 [ 426.683531][ T4342] ? __import_iovec+0x1ff/0x270 [ 426.688394][ T4342] ? import_iovec+0x69/0x80 [ 426.693427][ T4342] do_recvmmsg+0x34c/0x9e0 [ 426.697856][ T4342] ? do_anonymous_page+0x411/0x8b0 [ 426.703016][ T4342] ? fsnotify_perm+0x59/0x2e0 [ 426.707821][ T4342] ? __fsnotify_parent+0x32f/0x430 [ 426.713056][ T4342] ? __fget_light+0x21b/0x260 [ 426.717772][ T4342] ? __cond_resched+0x11/0x40 [ 426.722540][ T4342] __x64_sys_recvmmsg+0xcf/0x150 [ 426.727480][ T4342] ? exit_to_user_mode_prepare+0x65/0x190 [ 426.733251][ T4342] do_syscall_64+0x4a/0x90 [ 426.737680][ T4342] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 426.743685][ T4342] RIP: 0033:0x4665d9 [ 426.747707][ T4342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 426.767374][ T4342] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 426.775812][ T4342] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 426.784134][ T4342] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 426.792610][ T4342] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 426.800588][ T4342] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 426.808781][ T4342] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 09:48:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:53 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03001380000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x4000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 426.839317][ T4328] loop5: detected capacity change from 0 to 6 [ 426.845949][ T4328] FAT-fs (loop5): bogus logical sector size 256 [ 426.852236][ T4328] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400002b01000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 426.949116][ T4364] loop1: detected capacity change from 0 to 1 [ 426.991437][ T4375] loop5: detected capacity change from 0 to 6 [ 427.001439][ T4364] loop1: p2 p3 p4 [ 427.005427][ T4364] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 427.012882][ T4375] FAT-fs (loop5): bogus logical sector size 0 [ 427.019006][ T4375] FAT-fs (loop5): Can't find a valid FAT filesystem [ 427.022453][ T4364] loop1: p3 start 225 is beyond EOD, truncated [ 427.031891][ T4364] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 427.090146][ T4364] loop1: detected capacity change from 0 to 1 [ 427.120989][ T4364] loop1: p2 p3 p4 [ 427.124995][ T4364] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 427.133038][ T4364] loop1: p3 start 225 is beyond EOD, truncated [ 427.139929][ T4364] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:53 executing program 2 (fault-call:8 fault-nth:55): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xe000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400003101000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect(r0, &(0x7f0000000000)=@nl=@proc, 0x80) 09:48:53 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03002080000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xe0ffff00000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 427.268001][ T4400] loop1: detected capacity change from 0 to 1 [ 427.276679][ T4405] loop5: detected capacity change from 0 to 6 [ 427.301922][ T4400] loop1: p2 p3 p4 [ 427.305931][ T4400] loop1: p2 size 1073872896 extends beyond EOD, truncated 09:48:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x40027d6b38b8ac6d}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) 09:48:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x100000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 427.316056][ T4400] loop1: p3 start 225 is beyond EOD, truncated [ 427.317383][ T4405] FAT-fs (loop5): bogus logical sector size 0 [ 427.322278][ T4400] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 427.328337][ T4405] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:53 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_opts(r0, 0x29, 0x1, &(0x7f00000000c0)=@srh, 0x8) 09:48:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 427.387962][ T4400] loop1: detected capacity change from 0 to 1 [ 427.446959][ T4405] loop5: detected capacity change from 0 to 6 [ 427.455069][ T4405] FAT-fs (loop5): bogus logical sector size 0 [ 427.461217][ T4405] FAT-fs (loop5): Can't find a valid FAT filesystem [ 427.487081][ T4443] FAULT_INJECTION: forcing a failure. [ 427.487081][ T4443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.500265][ T4443] CPU: 0 PID: 4443 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 427.510368][ T4443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.520687][ T4443] Call Trace: [ 427.524086][ T4443] dump_stack+0x137/0x19d [ 427.528540][ T4443] should_fail+0x23c/0x250 [ 427.532980][ T4443] should_fail_usercopy+0x16/0x20 [ 427.538016][ T4443] _copy_to_iter+0x17c/0xdd0 [ 427.542688][ T4443] ? check_stack_object+0x61/0x70 [ 427.547720][ T4443] ? __virt_addr_valid+0x15a/0x1a0 [ 427.552841][ T4443] ? __check_object_size+0x253/0x310 [ 427.558193][ T4443] simple_copy_to_iter+0x4c/0x60 [ 427.563187][ T4443] ? skb_copy_datagram_iter+0xc0/0xc0 [ 427.568578][ T4443] __skb_datagram_iter+0xac/0x520 [ 427.573668][ T4443] ? ___cache_free+0x3c/0x300 [ 427.578372][ T4443] ? kfree+0xf0/0x1d0 [ 427.582362][ T4443] ? __kfree_skb+0xfe/0x150 [ 427.587850][ T4443] skb_copy_datagram_iter+0x39/0xc0 [ 427.593164][ T4443] unix_stream_read_actor+0x40/0x60 [ 427.598364][ T4443] unix_stream_read_generic+0x691/0x1260 [ 427.604064][ T4443] unix_stream_recvmsg+0x63/0x90 [ 427.609031][ T4443] ? init_peercred+0x180/0x180 [ 427.613822][ T4443] ? unix_stream_sendmsg+0xa90/0xa90 [ 427.619128][ T4443] ____sys_recvmsg+0x15d/0x310 [ 427.623911][ T4443] ? __import_iovec+0x1ff/0x270 [ 427.628765][ T4443] ? import_iovec+0x69/0x80 [ 427.633281][ T4443] do_recvmmsg+0x34c/0x9e0 [ 427.637716][ T4443] ? do_anonymous_page+0x411/0x8b0 [ 427.642953][ T4443] ? fsnotify_perm+0x59/0x2e0 [ 427.648401][ T4443] ? __fsnotify_parent+0x32f/0x430 [ 427.653614][ T4443] ? __fget_light+0x21b/0x260 [ 427.658298][ T4443] ? __cond_resched+0x11/0x40 [ 427.663009][ T4443] __x64_sys_recvmmsg+0xcf/0x150 [ 427.668008][ T4443] ? exit_to_user_mode_prepare+0x65/0x190 [ 427.673782][ T4443] do_syscall_64+0x4a/0x90 [ 427.678297][ T4443] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 427.684402][ T4443] RIP: 0033:0x4665d9 [ 427.688296][ T4443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 427.708056][ T4443] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 427.716485][ T4443] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 427.724511][ T4443] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 427.732491][ T4443] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 427.740487][ T4443] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 427.748463][ T4443] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 09:48:54 executing program 2 (fault-call:8 fault-nth:56): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x10e000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc) 09:48:54 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03002480000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400014001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}}, 0x0) [ 428.128602][ T4456] loop1: detected capacity change from 0 to 1 [ 428.129755][ T4455] loop5: detected capacity change from 0 to 6 09:48:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x200000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 428.171056][ T4455] FAT-fs (loop5): bogus logical sector size 256 [ 428.177352][ T4455] FAT-fs (loop5): Can't find a valid FAT filesystem [ 428.184546][ T4456] loop1: p2 p3 p4 [ 428.191438][ T4456] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 428.210964][ T4456] loop1: p3 start 225 is beyond EOD, truncated 09:48:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}]}, 0x18}}, 0x0) 09:48:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400034001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 428.217342][ T4456] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 428.225420][ T4455] loop5: detected capacity change from 0 to 6 [ 428.244390][ T4455] FAT-fs (loop5): bogus logical sector size 256 [ 428.250706][ T4455] FAT-fs (loop5): Can't find a valid FAT filesystem [ 428.289273][ T4456] loop1: detected capacity change from 0 to 1 [ 428.341698][ T4503] FAULT_INJECTION: forcing a failure. [ 428.341698][ T4503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.354841][ T4503] CPU: 0 PID: 4503 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 428.364934][ T4503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.375082][ T4503] Call Trace: [ 428.378367][ T4503] dump_stack+0x137/0x19d [ 428.383162][ T4503] should_fail+0x23c/0x250 [ 428.387599][ T4503] should_fail_usercopy+0x16/0x20 [ 428.393036][ T4503] _copy_to_iter+0x17c/0xdd0 [ 428.398067][ T4503] ? check_stack_object+0x61/0x70 [ 428.403245][ T4503] ? __virt_addr_valid+0x15a/0x1a0 [ 428.408483][ T4503] ? __check_object_size+0x253/0x310 [ 428.414043][ T4503] simple_copy_to_iter+0x4c/0x60 [ 428.419547][ T4503] __skb_datagram_iter+0x23c/0x520 [ 428.425152][ T4503] ? skb_copy_datagram_iter+0xc0/0xc0 [ 428.431674][ T4503] skb_copy_datagram_iter+0x39/0xc0 [ 428.437091][ T4503] unix_stream_read_actor+0x40/0x60 [ 428.442575][ T4503] unix_stream_read_generic+0x691/0x1260 [ 428.448235][ T4503] ? init_wait_entry+0x30/0x30 [ 428.453306][ T4503] unix_stream_recvmsg+0x63/0x90 [ 428.458431][ T4503] ? init_peercred+0x180/0x180 [ 428.463229][ T4503] ? unix_stream_sendmsg+0xa90/0xa90 [ 428.468630][ T4503] ____sys_recvmsg+0x15d/0x310 [ 428.473669][ T4503] ? __import_iovec+0x1ff/0x270 [ 428.478637][ T4503] ? import_iovec+0x69/0x80 [ 428.483343][ T4503] do_recvmmsg+0x34c/0x9e0 [ 428.487789][ T4503] ? fsnotify_perm+0x59/0x2e0 [ 428.492502][ T4503] ? __fsnotify_parent+0x32f/0x430 [ 428.497634][ T4503] ? __fget_light+0x21b/0x260 [ 428.502324][ T4503] ? __cond_resched+0x11/0x40 [ 428.507111][ T4503] __x64_sys_recvmmsg+0xcf/0x150 [ 428.512353][ T4503] ? exit_to_user_mode_prepare+0x65/0x190 [ 428.518172][ T4503] do_syscall_64+0x4a/0x90 [ 428.522652][ T4503] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 428.528719][ T4503] RIP: 0033:0x4665d9 [ 428.533510][ T4503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 428.553645][ T4503] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 428.562195][ T4503] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 428.570199][ T4503] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 428.578190][ T4503] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 428.586281][ T4503] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 428.594269][ T4503] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 428.616385][ T4456] loop1: p2 p3 p4 [ 428.625687][ T4456] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 428.625773][ T4502] loop5: detected capacity change from 0 to 6 [ 428.642714][ T4502] FAT-fs (loop5): bogus logical sector size 768 [ 428.645431][ T4456] loop1: p3 start 225 is beyond EOD, truncated [ 428.649001][ T4502] FAT-fs (loop5): Can't find a valid FAT filesystem [ 428.661927][ T4456] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 428.673855][ T1032] loop1: p2 p3 p4 [ 428.677677][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 428.685321][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 428.691527][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:55 executing program 2 (fault-call:8 fault-nth:57): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x204000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:55 executing program 3: r0 = epoll_create(0x3) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x80000000) 09:48:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400004401000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:55 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03002580000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x300000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x400000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 429.042504][ T4534] loop5: detected capacity change from 0 to 6 [ 429.049371][ T4531] loop1: detected capacity change from 0 to 1 [ 429.064522][ T4534] FAT-fs (loop5): bogus logical sector size 0 [ 429.070718][ T4534] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400004a01000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x500000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 429.100942][ T4531] loop1: p2 p3 p4 [ 429.105173][ T4531] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 429.113332][ T4531] loop1: p3 start 225 is beyond EOD, truncated [ 429.119647][ T4531] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 429.178003][ T4556] loop5: detected capacity change from 0 to 6 [ 429.190242][ T4556] FAT-fs (loop5): bogus logical sector size 0 [ 429.196382][ T4556] FAT-fs (loop5): Can't find a valid FAT filesystem [ 429.216011][ T4560] FAULT_INJECTION: forcing a failure. [ 429.216011][ T4560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.229138][ T4560] CPU: 1 PID: 4560 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 429.239641][ T4560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.249847][ T4560] Call Trace: [ 429.253130][ T4560] dump_stack+0x137/0x19d [ 429.257490][ T4560] should_fail+0x23c/0x250 [ 429.261914][ T4560] should_fail_usercopy+0x16/0x20 [ 429.267026][ T4560] _copy_to_iter+0x17c/0xdd0 [ 429.271630][ T4560] ? finish_task_switch+0xce/0x290 [ 429.276880][ T4560] ? check_stack_object+0x61/0x70 [ 429.282622][ T4560] ? __virt_addr_valid+0x15a/0x1a0 [ 429.287865][ T4560] ? __check_object_size+0x253/0x310 [ 429.293163][ T4560] simple_copy_to_iter+0x4c/0x60 [ 429.298120][ T4560] ? skb_copy_datagram_iter+0xc0/0xc0 [ 429.304227][ T4560] __skb_datagram_iter+0xac/0x520 [ 429.309342][ T4560] ? ___cache_free+0x3c/0x300 [ 429.314657][ T4560] ? kfree+0xf0/0x1d0 [ 429.318644][ T4560] ? __kfree_skb+0xfe/0x150 [ 429.323199][ T4560] skb_copy_datagram_iter+0x39/0xc0 [ 429.328427][ T4560] unix_stream_read_actor+0x40/0x60 [ 429.333626][ T4560] unix_stream_read_generic+0x691/0x1260 [ 429.339266][ T4560] ? init_wait_entry+0x30/0x30 [ 429.344044][ T4560] unix_stream_recvmsg+0x63/0x90 [ 429.348998][ T4560] ? init_peercred+0x180/0x180 [ 429.353770][ T4560] ? unix_stream_sendmsg+0xa90/0xa90 [ 429.359202][ T4560] ____sys_recvmsg+0x15d/0x310 [ 429.363978][ T4560] ? __import_iovec+0x1ff/0x270 [ 429.368833][ T4560] ? import_iovec+0x69/0x80 [ 429.373377][ T4560] do_recvmmsg+0x34c/0x9e0 [ 429.377801][ T4560] ? do_anonymous_page+0x411/0x8b0 [ 429.382978][ T4560] ? fsnotify_perm+0x59/0x2e0 [ 429.387719][ T4560] ? __fsnotify_parent+0x32f/0x430 [ 429.392840][ T4560] ? __fget_light+0x21b/0x260 [ 429.397556][ T4560] ? __cond_resched+0x11/0x40 [ 429.402234][ T4560] __x64_sys_recvmmsg+0xcf/0x150 [ 429.407178][ T4560] ? exit_to_user_mode_prepare+0x65/0x190 [ 429.412934][ T4560] do_syscall_64+0x4a/0x90 [ 429.417411][ T4560] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 429.423424][ T4560] RIP: 0033:0x4665d9 [ 429.427316][ T4560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 429.447206][ T4560] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 429.455742][ T4560] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 429.464332][ T4560] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 429.472417][ T4560] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 429.480482][ T4560] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 429.490018][ T4560] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 09:48:56 executing program 2 (fault-call:8 fault-nth:58): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000002740)=[{{&(0x7f0000000000)=@qipcrtr={0x2a, 0x2}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="84d4f1ac773c3620fc4f650ccfa14516fe8839ba492ff867307691ec67c03421a9ffdc39f1f1dd9e32a942ece6592e991fc4b8c877fb3ae3483e3a94b2dbf968ce9700371c047ec7464453f965e0e3db54f69fbd8a8ad51d01b3afdc1dbcff28665d22f615587490a7c988a244988bca7d55dae866d06a79d61a5a8624c4c811dea4d9d9e6114d2e93bed354af48bd13c3d2f5c4ecb141e03b502a4c266c00999a0b595b54e185796a1b211ccbbb5ce17530cb53d16f3e14efd36a06345a975d29693240467fb2883be1baa8a916888c6b12d6f1149d43ade89758b584d915", 0xdf}, {&(0x7f0000000180)='k\v', 0x2}, {&(0x7f0000000600)="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", 0x50a}], 0x3}}], 0x1, 0x0) 09:48:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x600000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400015c01000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:56 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03002680000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x604000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 429.891645][ T4591] loop1: detected capacity change from 0 to 1 [ 429.905408][ T4596] loop5: detected capacity change from 0 to 6 [ 429.925966][ T4591] loop1: p2 p3 p4 [ 429.927451][ T4596] FAT-fs (loop5): bogus logical sector size 256 09:48:56 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f00000011c0)=[{r0}], 0x1, 0x0) 09:48:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x700000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x800000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 429.930380][ T4591] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 429.936163][ T4596] FAT-fs (loop5): Can't find a valid FAT filesystem [ 429.989028][ T4596] loop5: detected capacity change from 0 to 6 [ 429.999651][ T4591] loop1: p3 start 225 is beyond EOD, truncated [ 430.005957][ T4591] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 430.008319][ T4596] FAT-fs (loop5): bogus logical sector size 256 [ 430.019679][ T4596] FAT-fs (loop5): Can't find a valid FAT filesystem [ 430.078561][ T4629] FAULT_INJECTION: forcing a failure. [ 430.078561][ T4629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.092464][ T4629] CPU: 0 PID: 4629 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 430.102706][ T4629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.112796][ T4629] Call Trace: [ 430.116075][ T4629] dump_stack+0x137/0x19d [ 430.120410][ T4629] should_fail+0x23c/0x250 [ 430.125007][ T4629] should_fail_usercopy+0x16/0x20 [ 430.130031][ T4629] _copy_to_iter+0x17c/0xdd0 [ 430.134637][ T4629] ? finish_task_switch+0xce/0x290 [ 430.139766][ T4629] ? check_stack_object+0x61/0x70 [ 430.144814][ T4629] ? __virt_addr_valid+0x15a/0x1a0 [ 430.150045][ T4629] ? __check_object_size+0x253/0x310 [ 430.155353][ T4629] simple_copy_to_iter+0x4c/0x60 [ 430.160315][ T4629] __skb_datagram_iter+0x23c/0x520 [ 430.165433][ T4629] ? skb_copy_datagram_iter+0xc0/0xc0 [ 430.171642][ T4629] skb_copy_datagram_iter+0x39/0xc0 [ 430.176926][ T4629] unix_stream_read_actor+0x40/0x60 [ 430.182216][ T4629] unix_stream_read_generic+0x691/0x1260 [ 430.187852][ T4629] unix_stream_recvmsg+0x63/0x90 [ 430.193149][ T4629] ? init_peercred+0x180/0x180 [ 430.197923][ T4629] ? unix_stream_sendmsg+0xa90/0xa90 [ 430.203432][ T4629] ____sys_recvmsg+0x15d/0x310 [ 430.208289][ T4629] ? __import_iovec+0x1ff/0x270 [ 430.214294][ T4629] ? import_iovec+0x69/0x80 [ 430.218964][ T4629] do_recvmmsg+0x34c/0x9e0 [ 430.223384][ T4629] ? do_anonymous_page+0x411/0x8b0 [ 430.228504][ T4629] ? fsnotify_perm+0x59/0x2e0 [ 430.233364][ T4629] ? __fsnotify_parent+0x32f/0x430 [ 430.238658][ T4629] ? __fget_light+0x21b/0x260 [ 430.243375][ T4629] ? __cond_resched+0x11/0x40 [ 430.248836][ T4629] __x64_sys_recvmmsg+0xcf/0x150 [ 430.253829][ T4629] ? exit_to_user_mode_prepare+0x65/0x190 [ 430.259578][ T4629] do_syscall_64+0x4a/0x90 [ 430.264001][ T4629] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 430.269993][ T4629] RIP: 0033:0x4665d9 [ 430.273887][ T4629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 430.294715][ T4629] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 430.303133][ T4629] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 430.311105][ T4629] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 430.320093][ T4629] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 430.328068][ T4629] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 430.336040][ T4629] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 430.362476][ T4591] loop1: detected capacity change from 0 to 1 [ 430.381582][ T4591] loop1: p2 p3 p4 [ 430.385750][ T4591] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 430.393752][ T4591] loop1: p3 start 225 is beyond EOD, truncated [ 430.400007][ T4591] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 430.441736][ T1032] loop1: p2 p3 p4 [ 430.445572][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 430.453662][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 430.459914][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x900000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80) 09:48:56 executing program 2 (fault-call:8 fault-nth:59): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400015d01000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:56 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03a72680000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:56 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1, 0x8}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000440)="bb294857a074304f1cf6776f11088ff1df6aef2c55ff2f6d130e56e290a674c376d52eb7ea922d718f1cdae838224d8acf94b8488777e07dec68272312a7bb79382841eb01eb22c98d2ac06e1e686e4292c09727b9b831d08bba87fb0d5280fe1f241a7d9e9cd557a3ed4cdcfca83a8ab4fba1de146f369f6c06ee4f62e4a5d0d5f961753f62a13ba65c8a42c91a7cffd901ed67b87cf6429f6448a0119ff9c2ad17e6dce40eb2c2cdec91b6609a8cb0fc85f4f0cae5db688ccf9b379b19f3c782ca9de4c3f0bc5ac316dc5e304563a70a0f44523e11bd86fd8c60792caae0df62aa2603372bb92110e6ce9af1aa13e3e4ec5b5857e0b97c972bef6cf33c66c1f163997f4176e5dcb08f2c985ba3e267e7683c6696deea3623e033d36b2db90e1bce18391dc768e08da7b90f20a746f75759e27c3aa7a29ed53bb1ffd821360c377fa44d615cf71777f5ccef2ad0330e4c1d9cfa0f5d931f1b928208715f59de61cb37b9d94aebf3475ac48f25bc60d00d715a5f7e91b88e428e0033a47202f08cdf61c4fcf76f211b23fbea65599518ab643c861c2423838bbb8e7e2d5f079697185879b51a21affb4cd9509a1954c6683d1d5f2dc9699346b87fea4c63fa4c63ebc61377a180e02a0a3e02c0dad4a8cb608d0fd739074b61c9df1ca93beb5acf2e21fdc0e17beacd5bc95e87b334437b392c4ccd0b9b39b4db76a67a1da0f7197bf02b43ce656f2d6e4542a2610b54b1aae5eac81ec6dcffc477eeb231b735e48680fe669de9d7bdb075eb055651a18bd0fc6b68f103c427ad992cb179acc469c8f72a24f8d95b7e778794d365fafd9d9fe9bd06309285009c3276ece642ee3894753d6e3fadb016930293100150394850f78db809b8ff029d3c5536997fd6a63b2844f2ac0248ab1c763955f2fcd2854427e83bdc755b8943460e9121d3ce41ed4f3e713fedb1ae4c29ade79ba19a562e401232e7eaac698247e6a21a1874ea83bbbbfb02200d8192947b9286eeaf4705c9da83ae40ede6195aa0e766aaaaa12cd5cd727975ada7ec0ba936253ac55cbd96d979b6231a4e15fbdbfd8075e15b6115105a80cd68254691d64007cd9c7c0d6bbb101e36f13fc9a6e05c95298e1e4e8fa8da847989f3dc22a83416d8c24528d9bf102324e7631d2aa196e635b44bb1d43397211213abf6488bd7c55c91b1c5204f0bdd7471866de47bd13a26ec61371f2a33eb0d43142d358e1ace4d2a5774fb0b1b5976d1904a666dc0ca0f6b07618a155420e945a7bcad5cfd7c91d73089b763ec944ad8845c1c4f5a8cfe34522a92894533f4ec51563370dec52f1fecdee75e9b055e094330549b0c407a03668ee71a5c1dda32072e116da302eb25e544e23a4cb491639c81c539ed95777a8ea9c9c6d2f3cf5c10e203bffa7d7e560edeb2f1f196fd0068356a39083ebcd2deb5374cf49b651e67276596f45246dd1f78c043dac4141421a531dd3a3b5431884321e35c91fe61fc7ecc66bb313ef4eeac5e67e1e1cfda53d3f8cbe32070a8f1662699a08c0df1432d7cb154ca2ab1ed78fda13f325bc7ee219cc2a877bc760ca2f0631d704da2dfccb086dcdc8ed8964621e748f9c70c078c1ce7bfd20432b0d87361a90531338205356cc4116b9a3c04cdf20658e511f340e85ed6a940fb9f28b4dc5bc5efc9500bf1f0b4548a9cd43be798b9d8b8f48983cc1f5621b467b3611b569e49b5759c45c3659c5c79c2545d1ca023141dddd04383480622d992600e89d5e64ffd3d8012ba1b2cea67fcbeb69205a2474f599f56f094e0cd4bc0435e1c2331df47ab4d92e251d4aad912001ec76933de47cfa0af0d08b10cc63160da34bc46fad195a6b621c46428ea9c36521da5919c7fe57a561eb3cc66dbe020c379d1e0568f77c65f7c2ff11ee6cc6587409f4fc3a75b073e087932caac8513038958210d9a810e80f8ddca75143983775e018254628c6b85ad0d1c066aac2626effc6bc183bbe82a3450fd9795495a89978385cded9550aca7cc52fac5b74c10376414196b90073bcbc023323af2c0c077bfb9d03676373486c22adb40ecd3f3651b83c71bcd21be12e7eda44b0bdbaf6c37af141b46bf02b3842fabc88123de7270c10d5ac4997da080c498fa0a1b18727569302881999d6215a82a1eb926503fd7389634a0afd2c7cf5a10ed379e2abcb82890e88bdba22def914ead3fa1e83823860e114efdb21cb00a9d31ac7543148171d85e6d166cf00f59dba379450018f09861f98fc77d1519314bbceabed3b56b67de57f7ad3198856dadf0c4819cd3353ab5e20e836dd5fdcc78a7cbfed446631c3521bb263f5d32191ea69c7ca45aba9280b55e0b37ec693e5bfb5859858dd1dd3b9cd68ee1f617706e3f86b08023371092bf30c3cd5efc977cabb3304ab277966fe05ab1a4fe7437e0a84695b124953007721643e7ba639fb9b4d733f4dbad154ad323593da5d1b9f2d6fce34f11163ce1479d4cf56f77969b460485f0d079c9a61e4e0581dc762a05939932d0f4cd3b59f9788d8b8d176a32c6f3f40de9f9b0f18bbd247cf21ef00e77a198b9805b01de0584d09f07ca4b0b11019cbd895c38a4ebe19281fa22d3e42f92bbff18fad16f15de80d1881cf9c0d7622fd705bb38e7ba98e6b712f6e67d0bff48daf7e64aaf89a58a90826d2f46c0f1e349050714828483bd9075870992aa08a532908c5dedcbc8714703c15b03baddee9a4aec57126630b429ebb8cf1a3b1c1cd2566e286cb362350b11e735563aa40ef12073fbb7eec66fcc4690c64302bfb7b9a2d48530f0efdaa982c8e94b192cbef3b2a6e99394de9bf1f5d7690966dbfd22f0466f9806bc4d8d8ea3694e3b31867bd396e329769849f3c1c1715c539315bd55e5923436258ad14100a964f7545aa990ae9d72d030ac144eb8f2ab1f9ae65a296cc1ccbead7b3663dfc23c1a535005f0306f1c24c58784233776148d35df0f2e4a699268845e3302bfbbceee4baa2d74822bf9f1af7be2e73046187afdb26faf3d526c886a6bad866d06d3b5a92a05931f76323a6547b77f14bcdc8662d91c6d8c1525d08235d94180243b3e1f4cbab40264bc5be23461565d9dfe7dffdd078ae24d50a12daeca431d048c04faefd23dbe4c80646094ce907e95261bbc41e1265b28dec5713444c912096e0f0093fd1cbe0aa6eb162e38dc9be690e895d119ad45279ff19f16875a33326562bf608af4ce820b6f949e43a5ff11a9d4ecb2a9b3e329a25a3965a7f0583e1d0f83ddc835eb54738ee7ca884579e052ab8c067e3fc0b5108813186677ed71a683528ec2073eb795ef17eb21081dd19938fea2611b2d11b7b970baf7fbb9d3bc191325b089f7f188e06e053aa92cc44f68211b9efbb0db25717e3a08f952630d0b6e0b9b695f2edd2aade75dcb777b7d744e63ab6095fe7cb70b044e81cb20cdde221f6378a5300006630430fc156453cdfa1e65b485717a9adcb4bd7d501d7460acd7e2c2c3ca08e988e5c1c02a9a0f8c4cd5e6b9876dd525eef0163bbfc55617fe0646e93addad618202a9cbd2a5b377b533248a7aacd56f5d5e32f9389fa16ed72f1b0504588dd0a6c901402a4d6d817f91b7f91c3b366ea59faf2bdb564b4ee3ded21cae9a1769c905ac38b79c40dcc63d809cba1c456369914c512fc5f97e6a7fb924285349ee23040d3ee1f7d78280757f0977d7bd523da579c4716b0dcbbe7976f8ff57885003647cb96d1527502ed17b951c2b27ae6b3f473a5391bca3c2caab4c9922ab561d9288c1ecfd82a7f2c835082a2bed8ba6e34b3d8eb396d1c55354dbd0b122413f8f2786f8dfae02bd324dade2389984649606f0b7e4539f772793e7df7e632915bf9bedc4689872131c8620142f537354366c2ec6fd4fb9b752680630baa83a6ca6702bf79c4cb8f11a73d3fe60ae30975c442aef0ee4d3c46fe726ef3608b7a3beb48f97361ca14bdeb9fd5355f9ba7e700c1f44b752677051cf75459ca0960273302ec10171088fc4042d458d60889d0d", 0xb29}], 0x1, &(0x7f0000000140)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x0, 0x3, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}]}}}], 0x30}, 0x8000) 09:48:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xa00000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:57 executing program 3: unshare(0x28000200) 09:48:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xb00000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {0x12}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}}, 0x0) [ 430.739174][ T4658] loop1: detected capacity change from 0 to 1 [ 430.745634][ T4660] loop5: detected capacity change from 0 to 6 [ 430.757166][ T4660] FAT-fs (loop5): bogus logical sector size 256 [ 430.763492][ T4660] FAT-fs (loop5): Can't find a valid FAT filesystem [ 430.825948][ T4660] loop5: detected capacity change from 0 to 6 [ 430.844564][ T4658] loop1: p2 p3 p4 [ 430.850571][ T4660] FAT-fs (loop5): bogus logical sector size 256 [ 430.852643][ T4658] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 430.857198][ T4660] FAT-fs (loop5): Can't find a valid FAT filesystem [ 430.900128][ T4658] loop1: p3 start 225 is beyond EOD, truncated [ 430.906780][ T4658] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 430.931618][ T4696] FAULT_INJECTION: forcing a failure. [ 430.931618][ T4696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.944981][ T4696] CPU: 1 PID: 4696 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 430.955067][ T4696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.966304][ T4696] Call Trace: [ 430.969590][ T4696] dump_stack+0x137/0x19d [ 430.974127][ T4696] should_fail+0x23c/0x250 [ 430.978605][ T4696] should_fail_usercopy+0x16/0x20 [ 430.983926][ T4696] _copy_to_iter+0x17c/0xdd0 [ 430.988882][ T4696] ? finish_task_switch+0xce/0x290 [ 430.994014][ T4696] ? check_stack_object+0x61/0x70 [ 430.999118][ T4696] ? __virt_addr_valid+0x15a/0x1a0 [ 431.004236][ T4696] ? __check_object_size+0x253/0x310 [ 431.009535][ T4696] simple_copy_to_iter+0x4c/0x60 [ 431.014482][ T4696] ? skb_copy_datagram_iter+0xc0/0xc0 [ 431.019900][ T4696] __skb_datagram_iter+0xac/0x520 [ 431.024937][ T4696] ? ___cache_free+0x3c/0x300 [ 431.029637][ T4696] ? kfree+0xf0/0x1d0 [ 431.033635][ T4696] ? __kfree_skb+0xfe/0x150 [ 431.038145][ T4696] skb_copy_datagram_iter+0x39/0xc0 [ 431.043398][ T4696] unix_stream_read_actor+0x40/0x60 [ 431.048601][ T4696] unix_stream_read_generic+0x691/0x1260 [ 431.054307][ T4696] unix_stream_recvmsg+0x63/0x90 [ 431.059255][ T4696] ? init_peercred+0x180/0x180 [ 431.064250][ T4696] ? unix_stream_sendmsg+0xa90/0xa90 [ 431.069577][ T4696] ____sys_recvmsg+0x15d/0x310 [ 431.074392][ T4696] ? __import_iovec+0x1ff/0x270 [ 431.079409][ T4696] ? import_iovec+0x69/0x80 [ 431.084009][ T4696] do_recvmmsg+0x34c/0x9e0 [ 431.088453][ T4696] ? do_anonymous_page+0x411/0x8b0 [ 431.093695][ T4696] ? fsnotify_perm+0x59/0x2e0 [ 431.098392][ T4696] ? __fsnotify_parent+0x32f/0x430 [ 431.103530][ T4696] ? __fget_light+0x21b/0x260 [ 431.108242][ T4696] ? __cond_resched+0x11/0x40 [ 431.112951][ T4696] __x64_sys_recvmmsg+0xcf/0x150 [ 431.117934][ T4696] ? exit_to_user_mode_prepare+0x65/0x190 [ 431.123662][ T4696] do_syscall_64+0x4a/0x90 [ 431.128119][ T4696] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 431.134028][ T4696] RIP: 0033:0x4665d9 [ 431.137925][ T4696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 431.157596][ T4696] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 431.166183][ T4696] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 431.174182][ T4696] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 431.182183][ T4696] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 431.190194][ T4696] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 431.198186][ T4696] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 431.262863][ T4658] loop1: detected capacity change from 0 to 1 [ 431.311044][ T4658] loop1: p2 p3 p4 [ 431.315490][ T4658] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 431.323593][ T4658] loop1: p3 start 225 is beyond EOD, truncated [ 431.329932][ T4658] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001380)=[{0x0}, {&(0x7f0000000140)='N', 0x1}], 0x2, 0x0, 0x38}, 0x304) 09:48:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xc00000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:57 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03002e80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:57 executing program 2 (fault-call:8 fault-nth:60): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400038001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xd00000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x400, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 09:48:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xe00000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x27000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 431.620867][ T4722] loop5: detected capacity change from 0 to 6 [ 431.632631][ T4723] loop1: detected capacity change from 0 to 1 [ 431.638188][ T4722] FAT-fs (loop5): bogus logical sector size 768 [ 431.645128][ T4722] FAT-fs (loop5): Can't find a valid FAT filesystem [ 431.661053][ T4723] loop1: p2 p3 p4 09:48:57 executing program 3: futimesat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 09:48:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xf00000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 431.665727][ T4723] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 431.688821][ T4723] loop1: p3 start 225 is beyond EOD, truncated [ 431.695244][ T4723] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 431.746358][ T4722] loop5: detected capacity change from 0 to 6 [ 431.757330][ T4722] FAT-fs (loop5): bogus logical sector size 768 [ 431.763764][ T4722] FAT-fs (loop5): Can't find a valid FAT filesystem [ 431.779467][ T4755] FAULT_INJECTION: forcing a failure. [ 431.779467][ T4755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.792567][ T4755] CPU: 0 PID: 4755 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 431.802775][ T4755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.812888][ T4755] Call Trace: [ 431.816188][ T4755] dump_stack+0x137/0x19d [ 431.820729][ T4755] should_fail+0x23c/0x250 [ 431.825675][ T4755] should_fail_usercopy+0x16/0x20 [ 431.830721][ T4755] _copy_to_iter+0x17c/0xdd0 [ 431.835315][ T4755] ? finish_task_switch+0xce/0x290 [ 431.840992][ T4755] ? check_stack_object+0x61/0x70 [ 431.846032][ T4755] ? __virt_addr_valid+0x15a/0x1a0 [ 431.851158][ T4755] ? __check_object_size+0x253/0x310 [ 431.856463][ T4755] simple_copy_to_iter+0x4c/0x60 [ 431.861753][ T4755] __skb_datagram_iter+0x23c/0x520 [ 431.866936][ T4755] ? skb_copy_datagram_iter+0xc0/0xc0 [ 431.872386][ T4755] skb_copy_datagram_iter+0x39/0xc0 [ 431.877708][ T4755] unix_stream_read_actor+0x40/0x60 [ 431.882934][ T4755] unix_stream_read_generic+0x691/0x1260 [ 431.889429][ T4755] unix_stream_recvmsg+0x63/0x90 [ 431.894378][ T4755] ? init_peercred+0x180/0x180 [ 431.899148][ T4755] ? unix_stream_sendmsg+0xa90/0xa90 [ 431.904488][ T4755] ____sys_recvmsg+0x15d/0x310 [ 431.909413][ T4755] ? __import_iovec+0x1ff/0x270 [ 431.914288][ T4755] ? import_iovec+0x69/0x80 [ 431.918903][ T4755] do_recvmmsg+0x34c/0x9e0 [ 431.923321][ T4755] ? do_anonymous_page+0x411/0x8b0 [ 431.928470][ T4755] ? fsnotify_perm+0x59/0x2e0 [ 431.933219][ T4755] ? __fsnotify_parent+0x32f/0x430 [ 431.938453][ T4755] ? __fget_light+0x21b/0x260 [ 431.943158][ T4755] ? __cond_resched+0x11/0x40 [ 431.947838][ T4755] __x64_sys_recvmmsg+0xcf/0x150 [ 431.952804][ T4755] do_syscall_64+0x4a/0x90 [ 431.957255][ T4755] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 431.963341][ T4755] RIP: 0033:0x4665d9 [ 431.968043][ T4755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 431.987842][ T4755] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 431.996290][ T4755] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 432.004272][ T4755] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 432.012398][ T4755] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 432.020514][ T4755] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 432.028557][ T4755] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 09:48:58 executing program 2 (fault-call:8 fault-nth:61): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:58 executing program 3: unlinkat(0xffffffffffffffff, 0x0, 0x1800) 09:48:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x1000000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:58 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03033880000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740000ac01000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:58 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x32, &(0x7f0000000040)={0x0, 0x3, '\x00', [@ra, @ra, @jumbo, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo]}, 0x20) 09:48:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x1100000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 432.464361][ T4772] loop5: detected capacity change from 0 to 6 [ 432.480745][ T4779] loop1: detected capacity change from 0 to 1 [ 432.480831][ T4772] FAT-fs (loop5): bogus logical sector size 0 [ 432.493065][ T4772] FAT-fs (loop5): Can't find a valid FAT filesystem 09:48:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x1200000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:58 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fchown(r0, 0x0, 0x0) [ 432.525047][ T4779] loop1: p2 p3 p4 [ 432.530123][ T4779] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 432.552877][ T4772] loop5: detected capacity change from 0 to 6 [ 432.559787][ T4779] loop1: p3 start 225 is beyond EOD, truncated [ 432.566053][ T4779] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) [ 432.579227][ T4772] FAT-fs (loop5): bogus logical sector size 0 [ 432.585995][ T4772] FAT-fs (loop5): Can't find a valid FAT filesystem [ 432.647810][ T4779] loop1: detected capacity change from 0 to 1 [ 432.674534][ T4820] FAULT_INJECTION: forcing a failure. [ 432.674534][ T4820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.687654][ T4820] CPU: 1 PID: 4820 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 432.697963][ T4820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.708022][ T4820] Call Trace: [ 432.711303][ T4820] dump_stack+0x137/0x19d [ 432.715687][ T4820] should_fail+0x23c/0x250 [ 432.720107][ T4820] should_fail_usercopy+0x16/0x20 [ 432.725271][ T4820] _copy_to_iter+0x17c/0xdd0 [ 432.729886][ T4820] ? finish_task_switch+0xce/0x290 [ 432.735088][ T4820] ? check_stack_object+0x61/0x70 [ 432.740223][ T4820] ? __virt_addr_valid+0x15a/0x1a0 [ 432.745630][ T4820] ? __check_object_size+0x253/0x310 [ 432.751538][ T4820] simple_copy_to_iter+0x4c/0x60 [ 432.756489][ T4820] ? skb_copy_datagram_iter+0xc0/0xc0 [ 432.761962][ T4820] __skb_datagram_iter+0xac/0x520 [ 432.767297][ T4820] ? ___cache_free+0x3c/0x300 [ 432.772002][ T4820] ? kfree+0xf0/0x1d0 [ 432.775999][ T4820] ? __kfree_skb+0xfe/0x150 [ 432.780844][ T4820] skb_copy_datagram_iter+0x39/0xc0 [ 432.786303][ T4820] unix_stream_read_actor+0x40/0x60 [ 432.791746][ T4820] unix_stream_read_generic+0x691/0x1260 [ 432.799149][ T4820] unix_stream_recvmsg+0x63/0x90 [ 432.804240][ T4820] ? init_peercred+0x180/0x180 [ 432.809030][ T4820] ? unix_stream_sendmsg+0xa90/0xa90 [ 432.814471][ T4820] ____sys_recvmsg+0x15d/0x310 [ 432.819240][ T4820] ? __import_iovec+0x1ff/0x270 [ 432.824220][ T4820] ? import_iovec+0x69/0x80 [ 432.828733][ T4820] do_recvmmsg+0x34c/0x9e0 [ 432.833155][ T4820] ? do_anonymous_page+0x411/0x8b0 [ 432.838283][ T4820] ? fsnotify_perm+0x59/0x2e0 [ 432.843023][ T4820] ? __fsnotify_parent+0x32f/0x430 [ 432.848154][ T4820] ? __fget_light+0x21b/0x260 [ 432.852849][ T4820] ? __cond_resched+0x11/0x40 [ 432.857536][ T4820] __x64_sys_recvmmsg+0xcf/0x150 [ 432.862504][ T4820] ? exit_to_user_mode_prepare+0x65/0x190 [ 432.868437][ T4820] do_syscall_64+0x4a/0x90 [ 432.872951][ T4820] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 432.878858][ T4820] RIP: 0033:0x4665d9 [ 432.884025][ T4820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 432.903820][ T4820] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 432.912772][ T4820] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 432.921485][ T4820] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 432.929636][ T4820] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 432.937750][ T4820] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 432.945798][ T4820] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 432.963202][ T1032] loop1: p2 p3 p4 [ 432.967091][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 432.975099][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 432.982501][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 432.991835][ T4779] loop1: p2 p3 p4 [ 432.995689][ T4779] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 433.004238][ T4779] loop1: p3 start 225 is beyond EOD, truncated [ 433.010524][ T4779] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 433.051780][ T1032] loop1: p2 p3 p4 [ 433.055891][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 433.065165][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 433.071466][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:48:59 executing program 2 (fault-call:8 fault-nth:62): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:48:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x1300000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:59 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 09:48:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740000c001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:59 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03003f80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:48:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000640)={0x0, 0xa, &(0x7f00000005c0)=[{&(0x7f0000000140)="82960b307dd12e7e3ca723d06aa81da0b2c551b31ca07028367f551754a67ef80da83456cfe681702b508b2fc775fe1e1ff8a57579ac8f2a073d4e37f94d0b18e56a4110a3e56c2ab1b347d2f22354432c5673ad5f3b5805af6337cec9", 0x5d}, {0x0}, {0x0}], 0x3}, 0x8) 09:48:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x1800000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 433.337644][ T4850] loop1: detected capacity change from 0 to 1 [ 433.351264][ T4856] loop5: detected capacity change from 0 to 6 [ 433.365936][ T4856] FAT-fs (loop5): bogus logical sector size 0 [ 433.373071][ T4856] FAT-fs (loop5): Can't find a valid FAT filesystem [ 433.384185][ T4850] loop1: p2 p3 p4 09:48:59 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2) 09:48:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:48:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x1900000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:48:59 executing program 3: r0 = socket$inet6(0x1c, 0x3, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x55, &(0x7f0000000100)={0x9, {{0x1c, 0x1c}}, {{0x1c, 0x1c, 0x3}}}, 0x108) [ 433.388471][ T4850] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 433.422451][ T4850] loop1: p3 start 225 is beyond EOD, truncated [ 433.428660][ T4850] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 433.505240][ T4850] loop1: detected capacity change from 0 to 1 [ 433.523081][ T4856] loop5: detected capacity change from 0 to 6 [ 433.527881][ T4893] FAULT_INJECTION: forcing a failure. [ 433.527881][ T4893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.542259][ T4893] CPU: 0 PID: 4893 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 433.555212][ T4893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.565353][ T4893] Call Trace: [ 433.568627][ T4893] dump_stack+0x137/0x19d [ 433.572963][ T4893] should_fail+0x23c/0x250 [ 433.577383][ T4893] should_fail_usercopy+0x16/0x20 [ 433.582420][ T4893] _copy_to_iter+0x17c/0xdd0 [ 433.587283][ T4893] ? check_stack_object+0x61/0x70 [ 433.592498][ T4893] ? __virt_addr_valid+0x15a/0x1a0 [ 433.597612][ T4893] ? __check_object_size+0x253/0x310 [ 433.602923][ T4893] simple_copy_to_iter+0x4c/0x60 [ 433.607918][ T4893] __skb_datagram_iter+0x23c/0x520 [ 433.613247][ T4893] ? skb_copy_datagram_iter+0xc0/0xc0 [ 433.618644][ T4893] skb_copy_datagram_iter+0x39/0xc0 [ 433.623847][ T4893] unix_stream_read_actor+0x40/0x60 [ 433.629046][ T4893] unix_stream_read_generic+0x691/0x1260 [ 433.634697][ T4893] ? init_wait_entry+0x30/0x30 [ 433.639485][ T4893] unix_stream_recvmsg+0x63/0x90 [ 433.644488][ T4893] ? init_peercred+0x180/0x180 [ 433.649259][ T4893] ? unix_stream_sendmsg+0xa90/0xa90 [ 433.654622][ T4893] ____sys_recvmsg+0x15d/0x310 [ 433.659392][ T4893] ? __import_iovec+0x1ff/0x270 [ 433.664249][ T4893] ? import_iovec+0x69/0x80 [ 433.668770][ T4893] do_recvmmsg+0x34c/0x9e0 [ 433.674675][ T4893] ? do_anonymous_page+0x411/0x8b0 [ 433.679801][ T4893] ? fsnotify_perm+0x59/0x2e0 [ 433.684514][ T4893] ? __fsnotify_parent+0x32f/0x430 [ 433.689757][ T4893] ? __fget_light+0x21b/0x260 [ 433.694479][ T4893] ? __cond_resched+0x11/0x40 [ 433.699218][ T4893] __x64_sys_recvmmsg+0xcf/0x150 [ 433.704158][ T4893] ? exit_to_user_mode_prepare+0x65/0x190 [ 433.709883][ T4893] do_syscall_64+0x4a/0x90 [ 433.714341][ T4893] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 433.720242][ T4893] RIP: 0033:0x4665d9 [ 433.724157][ T4893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 433.744212][ T4893] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 433.752911][ T4893] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 433.760903][ T4893] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 433.768872][ T4893] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 433.776926][ T4893] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 433.784899][ T4893] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 433.796168][ T4856] FAT-fs (loop5): bogus logical sector size 0 [ 433.803109][ T4856] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:00 executing program 2 (fault-call:8 fault-nth:63): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5e010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x2000000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:00 executing program 3: connect(0xffffffffffffff9c, &(0x7f0000000dc0)=@un=@abs={0x8}, 0x8) 09:49:00 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03004080000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740003c001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:00 executing program 3: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, 0x0, 0x0) [ 434.190866][ T4902] loop5: detected capacity change from 0 to 6 [ 434.225628][ T4911] loop1: detected capacity change from 0 to 1 [ 434.232555][ T4902] FAT-fs (loop5): bogus logical sector size 768 09:49:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x2010000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x2200000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 434.238823][ T4902] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:00 executing program 3: sendmsg$unix(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)}, 0x0) [ 434.291858][ T4911] loop1: p2 p3 p4 [ 434.295742][ T4911] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 434.316581][ T4902] loop5: detected capacity change from 0 to 6 [ 434.324123][ T4902] FAT-fs (loop5): bogus logical sector size 768 [ 434.330395][ T4902] FAT-fs (loop5): Can't find a valid FAT filesystem [ 434.336154][ T4911] loop1: p3 start 225 is beyond EOD, truncated [ 434.343204][ T4911] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 434.434577][ T4914] FAULT_INJECTION: forcing a failure. [ 434.434577][ T4914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.449413][ T4914] CPU: 0 PID: 4914 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 434.459500][ T4914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.469586][ T4914] Call Trace: [ 434.472869][ T4914] dump_stack+0x137/0x19d [ 434.477207][ T4914] should_fail+0x23c/0x250 [ 434.481664][ T4914] should_fail_usercopy+0x16/0x20 [ 434.486719][ T4914] _copy_to_iter+0x17c/0xdd0 [ 434.491314][ T4914] ? finish_task_switch+0xce/0x290 [ 434.496491][ T4914] ? check_stack_object+0x61/0x70 [ 434.501631][ T4914] ? __virt_addr_valid+0x15a/0x1a0 [ 434.506789][ T4914] ? __check_object_size+0x253/0x310 [ 434.512083][ T4914] simple_copy_to_iter+0x4c/0x60 [ 434.517028][ T4914] ? skb_copy_datagram_iter+0xc0/0xc0 [ 434.522488][ T4914] __skb_datagram_iter+0xac/0x520 [ 434.527539][ T4914] ? ___cache_free+0x3c/0x300 [ 434.532339][ T4914] ? kfree+0xf0/0x1d0 [ 434.536323][ T4914] ? __kfree_skb+0xfe/0x150 [ 434.540831][ T4914] skb_copy_datagram_iter+0x39/0xc0 [ 434.547086][ T4914] unix_stream_read_actor+0x40/0x60 [ 434.552353][ T4914] unix_stream_read_generic+0x691/0x1260 [ 434.558037][ T4914] ? init_wait_entry+0x30/0x30 [ 434.562822][ T4914] unix_stream_recvmsg+0x63/0x90 [ 434.567882][ T4914] ? init_peercred+0x180/0x180 [ 434.572758][ T4914] ? unix_stream_sendmsg+0xa90/0xa90 [ 434.578076][ T4914] ____sys_recvmsg+0x15d/0x310 [ 434.582841][ T4914] ? __import_iovec+0x1ff/0x270 [ 434.587709][ T4914] ? import_iovec+0x69/0x80 [ 434.592212][ T4914] do_recvmmsg+0x34c/0x9e0 [ 434.596631][ T4914] ? do_anonymous_page+0x411/0x8b0 [ 434.601771][ T4914] ? fsnotify_perm+0x59/0x2e0 [ 434.606452][ T4914] ? __fsnotify_parent+0x32f/0x430 [ 434.611587][ T4914] ? __fget_light+0x21b/0x260 [ 434.616356][ T4914] ? __cond_resched+0x11/0x40 [ 434.621032][ T4914] __x64_sys_recvmmsg+0xcf/0x150 [ 434.625988][ T4914] ? exit_to_user_mode_prepare+0x65/0x190 [ 434.631713][ T4914] do_syscall_64+0x4a/0x90 [ 434.636133][ T4914] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 434.642030][ T4914] RIP: 0033:0x4665d9 [ 434.645946][ T4914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 434.665630][ T4914] RSP: 002b:00007f269420c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 434.674125][ T4914] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 434.682124][ T4914] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 434.693045][ T4914] RBP: 00007f269420c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 434.701799][ T4914] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 434.709776][ T4914] R13: 00007fff05d995ff R14: 00007f269420c300 R15: 0000000000022000 09:49:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:01 executing program 3: getresgid(0x0, 0x0, &(0x7f0000002580)) fork() sendmsg$unix(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x158}, 0x0) fork() sendmsg$unix(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x158}, 0x0) getresgid(0x0, 0x0, &(0x7f0000002640)) 09:49:01 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03004880000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x2402000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:01 executing program 2 (fault-call:8 fault-nth:64): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002c601000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:01 executing program 3: setgroups(0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0xffffffffffffffff]) setgid(0x0) 09:49:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 435.111280][ T4976] loop5: detected capacity change from 0 to 6 [ 435.126814][ T4979] loop1: detected capacity change from 0 to 1 [ 435.135603][ T4976] FAT-fs (loop5): bogus sectors per cluster 198 [ 435.142044][ T4976] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x2500000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000fff01000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 435.165053][ T4979] loop1: p2 p3 p4 [ 435.168904][ T4979] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 435.177372][ T4979] loop1: p3 start 225 is beyond EOD, truncated [ 435.183633][ T4979] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:01 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r1, r0) [ 435.254050][ T4979] loop1: detected capacity change from 0 to 1 [ 435.274448][ T5012] loop5: detected capacity change from 0 to 6 [ 435.276278][ T5011] FAULT_INJECTION: forcing a failure. [ 435.276278][ T5011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.293747][ T5011] CPU: 1 PID: 5011 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 435.303814][ T5011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.314425][ T5011] Call Trace: [ 435.317812][ T5011] dump_stack+0x137/0x19d [ 435.323076][ T5011] should_fail+0x23c/0x250 [ 435.327519][ T5011] should_fail_usercopy+0x16/0x20 [ 435.332557][ T5011] _copy_to_iter+0x17c/0xdd0 [ 435.337149][ T5011] ? finish_task_switch+0xce/0x290 [ 435.342385][ T5011] ? check_stack_object+0x61/0x70 [ 435.347415][ T5011] ? __virt_addr_valid+0x15a/0x1a0 [ 435.352618][ T5011] ? __check_object_size+0x253/0x310 [ 435.360379][ T5011] simple_copy_to_iter+0x4c/0x60 [ 435.365432][ T5011] __skb_datagram_iter+0x23c/0x520 [ 435.370546][ T5011] ? skb_copy_datagram_iter+0xc0/0xc0 [ 435.375999][ T5011] skb_copy_datagram_iter+0x39/0xc0 [ 435.381788][ T5011] unix_stream_read_actor+0x40/0x60 [ 435.386986][ T5011] unix_stream_read_generic+0x691/0x1260 [ 435.392685][ T5011] unix_stream_recvmsg+0x63/0x90 [ 435.397631][ T5011] ? init_peercred+0x180/0x180 [ 435.402420][ T5011] ? unix_stream_sendmsg+0xa90/0xa90 [ 435.407727][ T5011] ____sys_recvmsg+0x15d/0x310 [ 435.412490][ T5011] ? __import_iovec+0x1ff/0x270 [ 435.417401][ T5011] ? import_iovec+0x69/0x80 [ 435.421955][ T5011] do_recvmmsg+0x34c/0x9e0 [ 435.426392][ T5011] ? do_anonymous_page+0x411/0x8b0 [ 435.431513][ T5011] ? fsnotify_perm+0x59/0x2e0 [ 435.436278][ T5011] ? __fsnotify_parent+0x32f/0x430 [ 435.441395][ T5011] ? __fget_light+0x21b/0x260 [ 435.446089][ T5011] ? __cond_resched+0x11/0x40 [ 435.450786][ T5011] __x64_sys_recvmmsg+0xcf/0x150 [ 435.455787][ T5011] ? exit_to_user_mode_prepare+0x65/0x190 [ 435.461517][ T5011] do_syscall_64+0x4a/0x90 [ 435.465950][ T5011] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 435.471884][ T5011] RIP: 0033:0x4665d9 [ 435.475913][ T5011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 435.495644][ T5011] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 435.504081][ T5011] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 435.512142][ T5011] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 435.520194][ T5011] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 435.528230][ T5011] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 435.536737][ T5011] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 435.551985][ T4979] loop1: p2 p3 p4 [ 435.556518][ T5012] FAT-fs (loop5): bogus logical sector size 3840 [ 435.556593][ T4979] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 435.562913][ T5012] FAT-fs (loop5): Can't find a valid FAT filesystem [ 435.579595][ T4979] loop1: p3 start 225 is beyond EOD, truncated [ 435.586169][ T4979] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 435.595890][ T1032] loop1: p2 p3 p4 [ 435.599805][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 435.608758][ T5012] loop5: detected capacity change from 0 to 6 [ 435.610927][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 435.616472][ T5012] FAT-fs (loop5): bogus logical sector size 3840 [ 435.621127][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 435.628223][ T5012] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8cffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:02 executing program 2 (fault-call:8 fault-nth:65): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x2802000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:02 executing program 3: accept$inet(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 09:49:02 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03004c80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040300000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x2902000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:02 executing program 3: sendmsg$unix(0xffffffffffffffff, &(0x7f0000002e00)={&(0x7f0000000c80)=@file={0x10}, 0x10, 0x0, 0x0, &(0x7f0000002cc0)=[@cred, @cred, @cred], 0x138}, 0x0) 09:49:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa0020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001380)=[{0x0}, {0x0}, {&(0x7f0000000140)='N', 0x1}], 0x3, 0x0, 0x38}, 0x0) 09:49:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xccffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 435.977893][ T5047] loop5: detected capacity change from 0 to 6 [ 435.991347][ T5046] loop1: detected capacity change from 0 to 1 [ 435.995716][ T5047] FAT-fs (loop5): bogus number of reserved sectors [ 436.004104][ T5047] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x3f00000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 436.056885][ T5046] loop1: p2 p3 p4 [ 436.060948][ T5046] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 436.073595][ T5047] loop5: detected capacity change from 0 to 6 [ 436.091953][ T5046] loop1: p3 start 225 is beyond EOD, truncated [ 436.098194][ T5046] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 436.110716][ T5047] FAT-fs (loop5): bogus number of reserved sectors [ 436.117249][ T5047] FAT-fs (loop5): Can't find a valid FAT filesystem [ 436.150308][ T5079] FAULT_INJECTION: forcing a failure. [ 436.150308][ T5079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.163565][ T5079] CPU: 0 PID: 5079 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 436.173642][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.183696][ T5079] Call Trace: [ 436.187032][ T5079] dump_stack+0x137/0x19d [ 436.191434][ T5079] should_fail+0x23c/0x250 [ 436.195854][ T5079] should_fail_usercopy+0x16/0x20 [ 436.201010][ T5079] _copy_to_iter+0x17c/0xdd0 [ 436.205612][ T5079] ? check_stack_object+0x61/0x70 [ 436.210800][ T5079] ? __virt_addr_valid+0x15a/0x1a0 [ 436.215936][ T5079] ? __check_object_size+0x253/0x310 [ 436.221227][ T5079] simple_copy_to_iter+0x4c/0x60 [ 436.226358][ T5079] ? skb_copy_datagram_iter+0xc0/0xc0 [ 436.231735][ T5079] __skb_datagram_iter+0xac/0x520 [ 436.236762][ T5079] ? ___cache_free+0x3c/0x300 [ 436.241443][ T5079] ? kfree+0xf0/0x1d0 [ 436.245540][ T5079] ? __kfree_skb+0xfe/0x150 [ 436.250052][ T5079] skb_copy_datagram_iter+0x39/0xc0 [ 436.255314][ T5079] unix_stream_read_actor+0x40/0x60 [ 436.260513][ T5079] unix_stream_read_generic+0x691/0x1260 [ 436.266164][ T5079] ? init_wait_entry+0x30/0x30 [ 436.271646][ T5079] unix_stream_recvmsg+0x63/0x90 [ 436.276703][ T5079] ? init_peercred+0x180/0x180 [ 436.281531][ T5079] ? unix_stream_sendmsg+0xa90/0xa90 [ 436.286843][ T5079] ____sys_recvmsg+0x15d/0x310 [ 436.291747][ T5079] ? __import_iovec+0x1ff/0x270 [ 436.296610][ T5079] ? import_iovec+0x69/0x80 [ 436.301495][ T5079] do_recvmmsg+0x34c/0x9e0 [ 436.305990][ T5079] ? do_anonymous_page+0x411/0x8b0 [ 436.311123][ T5079] ? fsnotify_perm+0x59/0x2e0 [ 436.318408][ T5079] ? __fsnotify_parent+0x32f/0x430 [ 436.323558][ T5079] ? __fget_light+0x21b/0x260 [ 436.328241][ T5079] ? __cond_resched+0x11/0x40 [ 436.332926][ T5079] __x64_sys_recvmmsg+0xcf/0x150 [ 436.337871][ T5079] ? exit_to_user_mode_prepare+0x65/0x190 [ 436.343635][ T5079] do_syscall_64+0x4a/0x90 [ 436.348085][ T5079] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 436.353991][ T5079] RIP: 0033:0x4665d9 [ 436.357903][ T5079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 436.377511][ T5079] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 436.386061][ T5079] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 436.394140][ T5079] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 436.402114][ T5079] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 436.415032][ T5079] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 436.423023][ T5079] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 09:49:03 executing program 2 (fault-call:8 fault-nth:66): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:03 executing program 3: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) 09:49:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x4000000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe83a1b00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040400000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:03 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03006080000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000000c0)="a2b47d0ae8d8c9a3dd07febf7176b3b6cafc10", 0x13}, {&(0x7f0000000100)="29ffe1f5b1bab6d08fce0ae91f4454fb599af0bbf5589aa04d09fbf3b49668760eb423d17fcf0796457612", 0x2b}, {&(0x7f0000000300)="202b1427464af194d02db20bb4994d7b37e4373d2dfbce29ce8faaa5a2616f243308321608a21f6a777b5008684021ec51e26073e45a815fe98cbbcb1c3604e8bc1799e7c88b0653f428296fd1d8eee8057318ccda16ebed4766ebf535e8b455e475fbeabf04b2da1d7725e725f89209015d77ad5b19af5bd1bc30f8d36359dadd9312e97e00687e0798a1749876723ab0f162cdd3177650f7bfdba0fabcf0c57a0a462f36d6c113f140363fdda2dd46c7c15ad76d4af747afff12cf99c837a57dbc50b7265342078af10e8907d679917372bc25de442da9cc022a53dc670a84ff546d7b07b4cd3e69617644c9f2d2a603f095e7518f622acbcfc22c9efc86052d9c8850766af9770690779d9367abed26512d5f8faa1620c28fafb8dde576edfd4bd63eda976a13f4e3a3e630cfa3009119f36fedef75169ad836c01cfb6da22ef9eacc563fb28b31f605ae4b1b5eb369ed30243ff1d578c0d4a25d32965b27765544327ca30ad45eb9525002421d4deae1dff17c8c3e13bdc6db9af6cb796648aff889700fdd6d30e0ce423abf78f1ce1947b55644f01f371fa584b4496adfcfa1d9811fa64df90f7f254fac8f1e0ec07e3663b15504b036b52158a8693c55e8b7be3e1b02b9e43609077bdbd6f967fb73c9ce5125d3417866dd45156b83e34f893303e28f7d54dff5fb224b3e7d1e60de3c0079959948ca8ce0769ec55cd1a6c811467c0e1c5f79de3558ea89fc38e60dc45bb1a0bf2c70aca41a51107294c5f0f50a668d6a879776467ab4ee2ff018264ab8348b5221e484b2adcf5014f8fceab3e42ae2480fb7e8e132b3d192d6183dad0e9ed50fba22766d179f99657fde7d15776e3085a5a672e057f68011930cad93722d4bccd864085ef5b2726750551cf8e7939bf7b58e0dce44db17b8cb49a822dce4f16ec7faebaceb793ea83409670110415d98e448618e765da2316f52e86db4970b949460fa755a3861e50283bb68f668642f21275c9d47513b723eb260651958cb5e8ba06701dade35b1d7fa0d5d48ceb9a4dbd91adb76bb88a633d5b156071b59df7514ba96f5de3c03f828a70e72d73aa98a8901cbbe187b0b239300a07f907355cc5e8badce21222f79f536c5eaaef4a74a1e7e35abf0cba2e5068115d44f9437368ac1c922e2bf722e4586a2526c01cabc825ac87b9fa1f618e992d205738c0c14de7915802e39d7bf73a18d2478984c154b9913007e4a868bd10cdda42285514835562bbe3c6d6d0edee3eb6d0a985fc1bc07ee8fc55672f86a498be5d709b2928ec5ceea4048b9e7c43375791b967ca0bdff99f706d8f11122398c400116d558b9ebbfc00cb8caa7c5971aea57a1e0f24db34b779d55aecfe463ace583a677ede702f69313cba1baedabead52835388e6b6fa93b9a562680f042c3b48cbed9dbfa7e9e8fbf266775d5ae3376ad6852eef4390a4384fd4bc4775f0ac0c8dceadf40aa59732755d1f4da513fbb8149588cd5650688a51a892aedbe04160f813620b1fbc34b1773aff16f3985f863cde9172c85e4156160ddd20c81871be7064a954862d06740fc739ce0fad84e148feb85f214d1ff092b72bdcc37fc3fc438c4bcc1efb46511f1de4b7bc61744328c0ce8bf7bd0e0ac6b5d8635289b20f95cb943456eb5bddfd94f6ee31d2db6c71f18697b70f881bbd21fd2247241134e2a509f162a1739906c57d08f37b0fa7187bb7ccb9a42b6411e4cd654580a4835247a44faaca9fee904a604ebdc4b40807b5c06fbb647d2abcb96ea621087cec697fc337a175a237a428b2fe8f153051124a3223d88f5fc32f195b95e4262cb8141fdb3e9699442a46900ce80df557324f7fe123bdef2aaaf99938455406b9786dfd4f9f3d740e5be56f184384b06d2d0b35d0f3b8c727fd3bda784a3c541a0514342fdd2c27ac252645805791bf45f569091d3961321e9e24c1f069c807968c2695c4a119fe3f32138a567f39222ab336c83e23bf79ba531b3d6e5cc919b67d869c397aa899eb29f1e9aa20dd77a0822c4183c9e0dea555fd5f13900b523a142d433f7e390f027bb92929374b196baab9b409c392a2b968417f728dd6ddcd280c3d0f1d2f7587f23ae2d2aba40c614e095e5374ce83b6e555bfd104d77c12249330deaccc9a0871a65b25b1ed889a3654338ba32140f61fb6b54ae687432551ce77d5c0dfc4902b5fc985b51782cba6d62334b6735e031985338e4322cc5d8199ce5e51532710575505481303f1594cdbf6d40689d13da3ce4d7e2c6fcff9391a98f578eda1b32a53a337c32d73cee09a4323736dc06ffc09d29cf6584dbbc3b4070d27eef87483eb441fa58dc3cfbb11af631b01728890daa629325f7a8312d698d34defe43b219e0a5461e5289fe34c180ef1c8f9fff127cf1a62494f2620e6c59619f6f742b51d371d234d80437312e5a250bb490fa522d4f5fca71f05bf37058018bed903c87626273eff5b10e5f8cab8f6ca2d805ea813463535661c0719ad82aa502a61b48a4cae02e7b2d8941629d885bc44b5c5a3a37d7cd60ebd8ceb5e24fe54a4da0cd523ce4e5196fa4dcd86349f74fb28b2101d3ecb45bc062dee7a62df81034ca353e5824c07d6d465475a3e09b5c041cd10c3bb792b80edc2bcaf3e757c3c08d1dc813bfd41a0111b735cccde084d64e233bf491bf95a2bd2f06571ba0ca1faa69c06ca9afbaf700b43953abb0709a36e2d239973ac374c3da8614e908f0fde6e0fe2f9bde2bca78e58a79c8c0517e1670c165490b5ff2da4177bf52b29751f1646b826bc218f448f2a040ef74c058577871da0e53ae40c6a18d786bc5efa8b132f79443f1ec1c24c7765393f92792c1f05e472f058a5c8a78222456190a5577248424413ace5e83848ad77738905806f03adeca96511c705e755980194ceb06eeeccdac88631b97740e521b7911e0d1b7c57b1a51c2ecef67acc935404fced6394e2b8d2d7a70a1f7c41ef316347f8925324fa69c829fb77961606faa3ce31f818367598f1c5b7320648425fc6724bbf972767c34066f1df83592d9c92a878b4abb964609eb500f206352be5181fcb7fea2a49ed67493119c991f68de21761086365369d65057418348c67c871bcb39cab7e1f597debe5c2275e208a2dc832351a33e9820474efb7e73aef62fb996128f8d3ae7f09dd530896372bfdffb09970cb96b32ea8fa9f2e197be2883ed78b55c958ab93a991e4a8e54aa32923cd9aba296a466818e88914cf91241e5b80a68f4152b48d62d306df0ddeb77e6adbbaad9620c12a39a894d9fb89b6535a9463e343e4b981d79be0e08cc10dd090a4e68341a396a0f02d04b7c133c35d71954b9576eb17ee38e3be13cd0efc4f5bc4fc72ef0137d21c90be01916eabb34f6983e5ab95a34ba7bf52a2902b36a704907f20e35565c95a3ab4cf55b7f89297cb5a88c1ea84ba2ca4d2ff7c7914ace864b31f656c6651b43bae787407abbc5e33e471cc2eee621e42d830c76301e3f47a9e801de76b51098ef7691ee42c28c792aa65f4634fd2dc3057e02d58f4ec14e64ffd2fb36eaa2e89d896add0e22307a31eb694550a6f55f528379f581c71980d458b48b3169e5051204d4081d6b8310534a6d07dfb0c67468ca080b4cc5d837aa6ed37781ed61cb76230d31cd5f383f05331bb3715fc0e4602ada17246055dd5b7835c8823c853a9e86845b5f0a049bcb3ec67c493ef56b8d496ea06a55402d90783e7cb0ec4d4211bf6b144727554dc240010cbaa9cf3d3a6955739604071ffc872a2766e398d51369397b1e2d7b501abfb8894fa81e829312f8be90bfd8f853eff6b8abd5c6126b45f316baa77e4e0f716445fc63e7bafa3449e7af25f8a902c0cb841c7d027d574de7919c2c856403a25b785aaabb80b6e7ac23c80cec13047561f68d3ee97ed326e25494e1d0bd0662a1779a0c5e36f93a238945ed44a68ab821bdaf27f64da0d6cc407208e3e4ba9f0f9581c847a4613579b610c0480734a5edab9ffff81570e73db7017b7e6f4a39fc0e5f718b36fb00867ff0ac5b41d611ed86e55cef69d642c29940a74ecd92b70ec082bdd6a3842cda2f8ef246de476dd46ae3cbcd7efcd94281e24f0d4a95858e6ac586197db0029c578b2ed511f89ca30e1e5d43588bd922f0d9ccad4e5d31c676c0835d57e31b3649582737c9b94fd9f1f45fabefcd0f2535f467d92db1ab5da8378f6401f4a815e2dbb064ce153e6177c31e2cf29b134a34a3e31b90e75c7a26b9d6f8f7a781509afb0c758d5711d7b1d4f04e67ccac422badf189a2bb91930a412f0836adcbed739f63671beffdb968dcb550191d807a9d450bd083eea77b0fa3d10c24d1ad4cfc5eb24f8ccdbb7d864a9261371af324bc799c3973ad93ec22a8cdc3fe9372bdcd06c3cae26f1c3532f8015a28c065dd95a221268d2c40573e2ddbbb42ed503843615a28222646433f2967c2e9a75935f89b11029a28b474b41baa3f354805e58f46bb87b7b969fd1057275190a0bd336ab7c36dda45134f146ede41a48366f146512ea909c793fa48b245befbdd687796545dc302087fcb2330e9ca38383cb08f8a349569a6f0270d9484d276c060bc5d0a31fe270e174a1c20925c675cf187e138ab0318181184e00951ab0c60e1fc6ec8765d904d0f9b275af272e179c56ad3eb85eadc91b2493fe00741747ca0e1a71b1eb1778d5342b6cbc3704a4d676829c23db4d243b92b978da54e6471b83ee828e416532e2833d8310612181fc616ecc866b03de80f897961914b962475c751aed680d0451194cf3f57375462e3ef2382e6c7b1464efd076524295c18b990aa4b453ee2c135dcc508700b241e211045b8e418363f165f14b413bfaf1d86bce70ac52ad1f1b5775c81e35e4c91263d2417120443eb329a35705e4818e6460032ed9ffb3bc0d5537c0689e84227b89805889a3c0a70dceaaeeffd67c7127bbd92df977f2aef345aed94ae0182785db7478bdf42f6c3b126697964ebe7407ee160ade6f96149df87446466a88f27962a5596ff3f16e027018f8705e240f19ffa5f3bc4b39c87ee5a80cf4408351c9283bd5780ecc7b5eecb05d4f8b60b5e979c0c0ddece9b2fbedfe46e869df6e5c15339f49e726d6406da08c87f6ddec461f1c4de51086cce7c19caa869c8f86111e967b515f16fcdfe7a70858f7055d5dc81342e5269b658c15da1d87248fa0964b5ef5c9bd20c9e3ebc265769a8261743dd89e2f157c6c92b3908e177115222da53c2aad4a89aee26e7705ddc0b1eb26fbbe0453da031834371c7112ba035691e89618c16c1228204157ce4c873909c5cb034178a3564bfe59105592e33b0ccf70a044d674f3893ec44b214e53ea240acc76e0bf8b9870913c59548bb086e4e32c5328e57efc0f543283a89226286f89f2c7fb259024795ab4a3178513d1b7da12e8594d02d598caffcef04a1bac996d8ef8dee56a7fade000aec98305f12fce579d4b811f6e7adb49ee9361a92fdd7e1301bb0522fbf7dff2e34fa3b60e6a42f34dc49c92e9a1e17bbf9d2eadd449943b80485668d7fc310b54634f5dabdbc3d064472e325ad6f8359eb4727d6b9b3474cded373ee0035d216ed2d6981c7ed2e30a5ef922e3fd553a59a992c0d35c8ea2b01982ba5eeac82f627c795306e01a1923ec70defe67f814ad7eb3a88b8eef9c8d5a7cbf882575fc91dedf0ed92b1aca2681830c1757b1ff9451918de503689df15ca783840ee0b48c6957232d0c97ed1de81103ba5baa34836f390", 0x1000}, {&(0x7f0000000140)="4e64b3d28a93b09648c02ec472658a3e91a4b41aee647224805a392fe01950963a340e1d13fa1d8ee79c909d062433264d1f7a6c314c6bac056984508318a091de4527bbb17340c635f80350dfaaba940236c61af0680fe67e8fb539dc7c52859e8e70a0fd65b58879988a", 0x6b}], 0x4, &(0x7f0000001540)=ANY=[], 0x38}, 0x304) 09:49:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x4800000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf6ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 436.849333][ T5099] loop5: detected capacity change from 0 to 6 [ 436.859388][ T5099] FAT-fs (loop5): bogus number of reserved sectors [ 436.865363][ T5102] loop1: detected capacity change from 0 to 1 [ 436.865959][ T5099] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:03 executing program 3: lchown(&(0x7f0000000080)='.\x00', 0x0, 0x0) [ 436.919994][ T5102] loop1: p2 p3 p4 [ 436.926529][ T5102] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 436.940860][ T5099] loop5: detected capacity change from 0 to 6 [ 436.949858][ T5102] loop1: p3 start 225 is beyond EOD, truncated [ 436.956066][ T5102] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x4c00000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:03 executing program 3: faccessat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) [ 436.966680][ T5099] FAT-fs (loop5): bogus number of reserved sectors [ 436.973410][ T5099] FAT-fs (loop5): Can't find a valid FAT filesystem [ 437.053609][ T5134] FAULT_INJECTION: forcing a failure. [ 437.053609][ T5134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.066717][ T5134] CPU: 1 PID: 5134 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 437.076830][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.087498][ T5134] Call Trace: [ 437.090780][ T5134] dump_stack+0x137/0x19d [ 437.095209][ T5134] should_fail+0x23c/0x250 [ 437.099802][ T5134] should_fail_usercopy+0x16/0x20 [ 437.104917][ T5134] _copy_to_iter+0x17c/0xdd0 [ 437.109525][ T5134] ? finish_task_switch+0xce/0x290 [ 437.114730][ T5134] ? check_stack_object+0x61/0x70 [ 437.119781][ T5134] ? __virt_addr_valid+0x15a/0x1a0 [ 437.125185][ T5134] ? __check_object_size+0x253/0x310 [ 437.130584][ T5134] simple_copy_to_iter+0x4c/0x60 [ 437.138152][ T5134] __skb_datagram_iter+0x23c/0x520 [ 437.143366][ T5134] ? skb_copy_datagram_iter+0xc0/0xc0 [ 437.149128][ T5134] skb_copy_datagram_iter+0x39/0xc0 [ 437.156018][ T5134] unix_stream_read_actor+0x40/0x60 [ 437.161334][ T5134] unix_stream_read_generic+0x691/0x1260 [ 437.167380][ T5134] ? init_wait_entry+0x30/0x30 [ 437.172223][ T5134] unix_stream_recvmsg+0x63/0x90 [ 437.177173][ T5134] ? init_peercred+0x180/0x180 [ 437.182025][ T5134] ? unix_stream_sendmsg+0xa90/0xa90 [ 437.188371][ T5134] ____sys_recvmsg+0x15d/0x310 [ 437.193364][ T5134] ? __import_iovec+0x1ff/0x270 [ 437.198408][ T5134] ? import_iovec+0x69/0x80 [ 437.202933][ T5134] do_recvmmsg+0x34c/0x9e0 [ 437.207444][ T5134] ? do_anonymous_page+0x411/0x8b0 [ 437.212624][ T5134] ? fsnotify_perm+0x59/0x2e0 [ 437.217526][ T5134] ? __fsnotify_parent+0x32f/0x430 [ 437.222648][ T5134] ? __fget_light+0x21b/0x260 [ 437.227779][ T5134] ? __cond_resched+0x11/0x40 [ 437.232605][ T5134] __x64_sys_recvmmsg+0xcf/0x150 [ 437.237653][ T5134] ? exit_to_user_mode_prepare+0x65/0x190 [ 437.243686][ T5134] do_syscall_64+0x4a/0x90 [ 437.248114][ T5134] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 437.254234][ T5134] RIP: 0033:0x4665d9 [ 437.258132][ T5134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 437.278917][ T5134] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 437.288259][ T5134] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 437.297649][ T5134] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 437.306068][ T5134] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 437.314117][ T5134] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 437.322186][ T5134] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 437.348017][ T5102] loop1: detected capacity change from 0 to 1 [ 437.373284][ T5102] loop1: p2 p3 p4 [ 437.377260][ T5102] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 437.385365][ T5102] loop1: p3 start 225 is beyond EOD, truncated [ 437.391743][ T5102] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:03 executing program 2 (fault-call:8 fault-nth:67): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x6000000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400041100000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:03 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0xa, 0x0, 0x0) 09:49:03 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03006880000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xff070000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x6800000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x85, &(0x7f0000001000)={0x10, 0x2}, 0x10) [ 437.705765][ T5168] loop1: detected capacity change from 0 to 1 [ 437.715009][ T5167] loop5: detected capacity change from 0 to 6 [ 437.740937][ T5168] loop1: p2 p3 p4 [ 437.746016][ T5168] loop1: p2 size 1073872896 extends beyond EOD, truncated 09:49:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:04 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x40, &(0x7f0000000000), 0x4) 09:49:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x6b12000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 437.769636][ T5167] FAT-fs (loop5): bogus number of reserved sectors [ 437.776208][ T5167] FAT-fs (loop5): Can't find a valid FAT filesystem [ 437.784063][ T5168] loop1: p3 start 225 is beyond EOD, truncated [ 437.790238][ T5168] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 437.842606][ T5167] loop5: detected capacity change from 0 to 6 [ 437.862549][ T5167] FAT-fs (loop5): bogus number of reserved sectors [ 437.869389][ T5167] FAT-fs (loop5): Can't find a valid FAT filesystem [ 437.902371][ T5212] FAULT_INJECTION: forcing a failure. [ 437.902371][ T5212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.915480][ T5212] CPU: 0 PID: 5212 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 437.925583][ T5212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.935674][ T5212] Call Trace: [ 437.938976][ T5212] dump_stack+0x137/0x19d [ 437.943394][ T5212] should_fail+0x23c/0x250 [ 437.947838][ T5212] should_fail_usercopy+0x16/0x20 [ 437.952865][ T5212] _copy_to_iter+0x17c/0xdd0 [ 437.957473][ T5212] ? finish_task_switch+0xce/0x290 [ 437.962591][ T5212] ? check_stack_object+0x61/0x70 [ 437.967727][ T5212] ? __virt_addr_valid+0x15a/0x1a0 [ 437.972868][ T5212] ? __check_object_size+0x253/0x310 [ 437.978299][ T5212] simple_copy_to_iter+0x4c/0x60 [ 437.983248][ T5212] ? skb_copy_datagram_iter+0xc0/0xc0 [ 437.988729][ T5212] __skb_datagram_iter+0xac/0x520 [ 437.993770][ T5212] ? ___cache_free+0x3c/0x300 [ 437.998502][ T5212] ? kfree+0xf0/0x1d0 [ 438.002606][ T5212] ? __kfree_skb+0xfe/0x150 [ 438.007159][ T5212] skb_copy_datagram_iter+0x39/0xc0 [ 438.012410][ T5212] unix_stream_read_actor+0x40/0x60 [ 438.017679][ T5212] unix_stream_read_generic+0x691/0x1260 [ 438.023333][ T5212] unix_stream_recvmsg+0x63/0x90 [ 438.028336][ T5212] ? init_peercred+0x180/0x180 [ 438.033186][ T5212] ? unix_stream_sendmsg+0xa90/0xa90 [ 438.038480][ T5212] ____sys_recvmsg+0x15d/0x310 [ 438.043344][ T5212] ? __import_iovec+0x1ff/0x270 [ 438.048223][ T5212] ? import_iovec+0x69/0x80 [ 438.052727][ T5212] do_recvmmsg+0x34c/0x9e0 [ 438.057150][ T5212] ? do_anonymous_page+0x411/0x8b0 [ 438.062270][ T5212] ? fsnotify_perm+0x59/0x2e0 [ 438.066988][ T5212] ? __fsnotify_parent+0x32f/0x430 [ 438.072298][ T5212] ? __fget_light+0x21b/0x260 [ 438.077003][ T5212] ? __cond_resched+0x11/0x40 [ 438.081688][ T5212] __x64_sys_recvmmsg+0xcf/0x150 [ 438.086635][ T5212] ? exit_to_user_mode_prepare+0x65/0x190 [ 438.092365][ T5212] do_syscall_64+0x4a/0x90 [ 438.096920][ T5212] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 438.103047][ T5212] RIP: 0033:0x4665d9 [ 438.106939][ T5212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 438.126550][ T5212] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 438.135251][ T5212] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 438.143367][ T5212] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 438.151360][ T5212] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 438.159456][ T5212] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 438.167451][ T5212] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 09:49:04 executing program 2 (fault-call:8 fault-nth:68): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffff8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:04 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03006c80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x6c00000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:04 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000), 0x4) 09:49:04 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400042200000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x7400000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x7800000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 438.566258][ T5231] loop1: detected capacity change from 0 to 1 [ 438.572562][ T5229] loop5: detected capacity change from 0 to 6 [ 438.583545][ T5229] FAT-fs (loop5): bogus number of reserved sectors [ 438.590131][ T5229] FAT-fs (loop5): Can't find a valid FAT filesystem [ 438.598087][ T5231] loop1: p2 p3 p4 [ 438.605324][ T5231] loop1: p2 size 1073872896 extends beyond EOD, truncated 09:49:04 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x2}, 0x1c) 09:49:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 438.619179][ T5231] loop1: p3 start 225 is beyond EOD, truncated [ 438.625414][ T5231] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x7a00000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 438.665672][ T5229] loop5: detected capacity change from 0 to 6 [ 438.683690][ T5229] FAT-fs (loop5): bogus number of reserved sectors [ 438.690257][ T5229] FAT-fs (loop5): Can't find a valid FAT filesystem [ 438.695468][ T5231] loop1: detected capacity change from 0 to 1 [ 438.751597][ T1032] loop1: p2 p3 p4 [ 438.755979][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 438.765989][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 438.767486][ T5274] FAULT_INJECTION: forcing a failure. [ 438.767486][ T5274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.772234][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 438.785261][ T5274] CPU: 0 PID: 5274 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 438.802515][ T5274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.812581][ T5274] Call Trace: [ 438.815892][ T5274] dump_stack+0x137/0x19d [ 438.820265][ T5274] should_fail+0x23c/0x250 [ 438.825136][ T5274] should_fail_usercopy+0x16/0x20 [ 438.830171][ T5274] _copy_to_iter+0x17c/0xdd0 [ 438.834909][ T5274] ? finish_task_switch+0xce/0x290 [ 438.840091][ T5274] ? check_stack_object+0x61/0x70 [ 438.845170][ T5274] ? __virt_addr_valid+0x15a/0x1a0 [ 438.850286][ T5274] ? __check_object_size+0x253/0x310 [ 438.855890][ T5274] simple_copy_to_iter+0x4c/0x60 [ 438.860845][ T5274] __skb_datagram_iter+0x23c/0x520 [ 438.866031][ T5274] ? skb_copy_datagram_iter+0xc0/0xc0 [ 438.871529][ T5274] skb_copy_datagram_iter+0x39/0xc0 [ 438.876733][ T5274] unix_stream_read_actor+0x40/0x60 [ 438.881943][ T5274] unix_stream_read_generic+0x691/0x1260 [ 438.887624][ T5274] unix_stream_recvmsg+0x63/0x90 [ 438.892617][ T5274] ? init_peercred+0x180/0x180 [ 438.897391][ T5274] ? unix_stream_sendmsg+0xa90/0xa90 [ 438.902796][ T5274] ____sys_recvmsg+0x15d/0x310 [ 438.907597][ T5274] ? __import_iovec+0x1ff/0x270 [ 438.912621][ T5274] ? import_iovec+0x69/0x80 [ 438.917143][ T5274] do_recvmmsg+0x34c/0x9e0 [ 438.921665][ T5274] ? do_anonymous_page+0x411/0x8b0 [ 438.926865][ T5274] ? fsnotify_perm+0x59/0x2e0 [ 438.931616][ T5274] ? __fsnotify_parent+0x32f/0x430 [ 438.936738][ T5274] ? __fget_light+0x21b/0x260 [ 438.941651][ T5274] ? __cond_resched+0x11/0x40 [ 438.946342][ T5274] __x64_sys_recvmmsg+0xcf/0x150 [ 438.951281][ T5274] ? exit_to_user_mode_prepare+0x65/0x190 [ 438.957092][ T5274] do_syscall_64+0x4a/0x90 [ 438.961511][ T5274] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 438.967439][ T5274] RIP: 0033:0x4665d9 [ 438.971391][ T5274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 438.991142][ T5274] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 438.999564][ T5274] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 439.007534][ T5274] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 439.015655][ T5274] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 439.023734][ T5274] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 439.031903][ T5274] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 439.050338][ T5231] loop1: p2 p3 p4 [ 439.054228][ T5231] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 439.062317][ T5231] loop1: p3 start 225 is beyond EOD, truncated [ 439.068639][ T5231] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) 09:49:05 executing program 2 (fault-call:8 fault-nth:69): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8303000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740004cf00000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:05 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03007480000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8403000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:05 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) 09:49:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 439.434413][ T5303] loop5: detected capacity change from 0 to 6 [ 439.442674][ T5302] loop1: detected capacity change from 0 to 1 [ 439.460112][ T5303] FAT-fs (loop5): bogus number of reserved sectors [ 439.466787][ T5303] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8503000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000000)="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", 0x5c9, 0x0, &(0x7f0000001000)={0x10, 0x2}, 0x10) [ 439.502454][ T5302] loop1: p2 p3 p4 [ 439.508240][ T5302] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 439.516544][ T5302] loop1: p3 start 225 is beyond EOD, truncated [ 439.522738][ T5302] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 439.529950][ T5303] loop5: detected capacity change from 0 to 6 09:49:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 439.552409][ T5303] FAT-fs (loop5): bogus number of reserved sectors [ 439.559138][ T5303] FAT-fs (loop5): Can't find a valid FAT filesystem [ 439.623066][ T5340] FAULT_INJECTION: forcing a failure. [ 439.623066][ T5340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.636160][ T5340] CPU: 0 PID: 5340 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 439.646262][ T5340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.656328][ T5340] Call Trace: [ 439.659626][ T5340] dump_stack+0x137/0x19d [ 439.664054][ T5340] should_fail+0x23c/0x250 [ 439.668488][ T5340] should_fail_usercopy+0x16/0x20 [ 439.673522][ T5340] _copy_to_iter+0x17c/0xdd0 [ 439.678112][ T5340] ? finish_task_switch+0xce/0x290 [ 439.683424][ T5340] ? check_stack_object+0x61/0x70 [ 439.688452][ T5340] ? __virt_addr_valid+0x15a/0x1a0 [ 439.693617][ T5340] ? __check_object_size+0x253/0x310 [ 439.698905][ T5340] simple_copy_to_iter+0x4c/0x60 [ 439.703851][ T5340] ? skb_copy_datagram_iter+0xc0/0xc0 [ 439.709231][ T5340] __skb_datagram_iter+0xac/0x520 [ 439.714370][ T5340] ? ___cache_free+0x3c/0x300 [ 439.719047][ T5340] ? kfree+0xf0/0x1d0 [ 439.723309][ T5340] ? __kfree_skb+0xfe/0x150 [ 439.727852][ T5340] skb_copy_datagram_iter+0x39/0xc0 [ 439.733079][ T5340] unix_stream_read_actor+0x40/0x60 [ 439.738339][ T5340] unix_stream_read_generic+0x691/0x1260 [ 439.744084][ T5340] ? init_wait_entry+0x30/0x30 [ 439.748994][ T5340] unix_stream_recvmsg+0x63/0x90 [ 439.753942][ T5340] ? init_peercred+0x180/0x180 [ 439.758717][ T5340] ? unix_stream_sendmsg+0xa90/0xa90 [ 439.764083][ T5340] ____sys_recvmsg+0x15d/0x310 [ 439.768881][ T5340] ? __import_iovec+0x1ff/0x270 [ 439.773760][ T5340] ? import_iovec+0x69/0x80 [ 439.778291][ T5340] do_recvmmsg+0x34c/0x9e0 [ 439.782727][ T5340] ? do_anonymous_page+0x411/0x8b0 [ 439.787846][ T5340] ? fsnotify_perm+0x59/0x2e0 [ 439.792522][ T5340] ? __fsnotify_parent+0x32f/0x430 [ 439.797640][ T5340] ? __fget_light+0x21b/0x260 [ 439.802333][ T5340] ? __cond_resched+0x11/0x40 [ 439.807010][ T5340] __x64_sys_recvmmsg+0xcf/0x150 [ 439.812052][ T5340] ? exit_to_user_mode_prepare+0x65/0x190 [ 439.817797][ T5340] do_syscall_64+0x4a/0x90 [ 439.822224][ T5340] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 439.828215][ T5340] RIP: 0033:0x4665d9 [ 439.832198][ T5340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 439.852112][ T5340] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 439.860530][ T5340] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 439.868502][ T5340] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 439.876483][ T5340] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 439.884458][ T5340] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 439.892445][ T5340] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 439.906207][ T5302] loop1: detected capacity change from 0 to 1 09:49:06 executing program 2 (fault-call:8 fault-nth:70): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8603000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:06 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1c, 0x1c}, 0x1c) 09:49:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040201000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:06 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03007a80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8703000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 440.293110][ T5365] loop1: detected capacity change from 0 to 1 [ 440.293172][ T5364] loop5: detected capacity change from 0 to 6 [ 440.322910][ T5364] FAT-fs (loop5): bogus number of FAT sectors [ 440.329028][ T5364] FAT-fs (loop5): Can't find a valid FAT filesystem [ 440.336318][ T5365] loop1: p2 p3 p4 09:49:06 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2}, 0x0) 09:49:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 440.341109][ T5365] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 440.355511][ T5365] loop1: p3 start 225 is beyond EOD, truncated [ 440.362053][ T5365] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8803000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8903000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 440.403116][ T5364] loop5: detected capacity change from 0 to 6 [ 440.437384][ T5364] FAT-fs (loop5): bogus number of FAT sectors [ 440.443645][ T5364] FAT-fs (loop5): Can't find a valid FAT filesystem [ 440.458836][ T5365] loop1: detected capacity change from 0 to 1 [ 440.515637][ T5365] loop1: p2 p3 p4 [ 440.519448][ T5365] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 440.521531][ T5373] FAULT_INJECTION: forcing a failure. [ 440.521531][ T5373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.528425][ T5365] loop1: p3 start 225 is beyond EOD, [ 440.539632][ T5373] CPU: 1 PID: 5373 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 440.539658][ T5373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.545055][ T5365] truncated [ 440.555101][ T5373] Call Trace: [ 440.555112][ T5373] dump_stack+0x137/0x19d [ 440.565219][ T5365] loop1: p4 size 3657465856 extends beyond EOD, [ 440.568288][ T5373] should_fail+0x23c/0x250 [ 440.571693][ T5365] truncated [ 440.576002][ T5373] should_fail_usercopy+0x16/0x20 [ 440.595032][ T5373] _copy_to_iter+0x17c/0xdd0 [ 440.599653][ T5373] ? finish_task_switch+0xce/0x290 [ 440.604809][ T5373] ? check_stack_object+0x61/0x70 [ 440.610090][ T5373] ? __virt_addr_valid+0x15a/0x1a0 [ 440.615218][ T5373] ? __check_object_size+0x253/0x310 [ 440.620502][ T5373] simple_copy_to_iter+0x4c/0x60 [ 440.625446][ T5373] __skb_datagram_iter+0x23c/0x520 [ 440.630540][ T5373] ? skb_copy_datagram_iter+0xc0/0xc0 [ 440.635995][ T5373] skb_copy_datagram_iter+0x39/0xc0 [ 440.641198][ T5373] unix_stream_read_actor+0x40/0x60 [ 440.646400][ T5373] unix_stream_read_generic+0x691/0x1260 [ 440.652053][ T5373] unix_stream_recvmsg+0x63/0x90 [ 440.657005][ T5373] ? init_peercred+0x180/0x180 [ 440.661937][ T5373] ? unix_stream_sendmsg+0xa90/0xa90 [ 440.667265][ T5373] ____sys_recvmsg+0x15d/0x310 [ 440.672072][ T5373] ? __import_iovec+0x1ff/0x270 [ 440.676911][ T5373] ? import_iovec+0x69/0x80 [ 440.681475][ T5373] do_recvmmsg+0x34c/0x9e0 [ 440.690891][ T5373] ? do_anonymous_page+0x411/0x8b0 [ 440.696022][ T5373] ? fsnotify_perm+0x59/0x2e0 [ 440.700729][ T5373] ? __fsnotify_parent+0x32f/0x430 [ 440.705834][ T5373] ? __fget_light+0x21b/0x260 [ 440.710843][ T5373] ? __cond_resched+0x11/0x40 [ 440.715505][ T5373] __x64_sys_recvmmsg+0xcf/0x150 [ 440.720445][ T5373] ? exit_to_user_mode_prepare+0x65/0x190 [ 440.726186][ T5373] do_syscall_64+0x4a/0x90 [ 440.730647][ T5373] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 440.737182][ T5373] RIP: 0033:0x4665d9 [ 440.741190][ T5373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 440.761297][ T5373] RSP: 002b:00007f269420c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 440.771781][ T5373] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 440.779926][ T5373] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 440.789187][ T5373] RBP: 00007f269420c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 440.797172][ T5373] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 440.805714][ T5373] R13: 00007fff05d995ff R14: 00007f269420c300 R15: 0000000000022000 09:49:07 executing program 2 (fault-call:8 fault-nth:71): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:07 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0) 09:49:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8a03000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040301000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:07 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03048080000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:07 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 09:49:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8b03000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000380), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000100)=""/198) 09:49:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8cffffff00000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 441.149552][ T5427] loop1: detected capacity change from 0 to 1 09:49:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc020660b, 0x0) [ 441.214407][ T5427] loop1: p2 p3 p4 [ 441.220487][ T5427] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 441.229500][ T5427] loop1: p3 start 225 is beyond EOD, truncated [ 441.235828][ T5427] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 441.248564][ T5435] loop5: detected capacity change from 0 to 6 [ 441.256125][ T5435] FAT-fs (loop5): bogus sectors per cluster 3 [ 441.262305][ T5435] FAT-fs (loop5): Can't find a valid FAT filesystem [ 441.335695][ T5427] loop1: detected capacity change from 0 to 1 [ 441.352143][ T5435] loop5: detected capacity change from 0 to 6 [ 441.358800][ T5435] FAT-fs (loop5): bogus sectors per cluster 3 [ 441.365095][ T5435] FAT-fs (loop5): Can't find a valid FAT filesystem [ 441.373468][ T5440] FAULT_INJECTION: forcing a failure. [ 441.373468][ T5440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.386528][ T5440] CPU: 0 PID: 5440 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 441.396629][ T5440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.406797][ T5440] Call Trace: [ 441.410067][ T5440] dump_stack+0x137/0x19d [ 441.414523][ T5440] should_fail+0x23c/0x250 [ 441.419019][ T5440] should_fail_usercopy+0x16/0x20 [ 441.424262][ T5440] _copy_to_iter+0x17c/0xdd0 [ 441.428989][ T5440] ? check_stack_object+0x61/0x70 [ 441.434971][ T5440] ? __virt_addr_valid+0x15a/0x1a0 [ 441.440280][ T5440] ? __check_object_size+0x253/0x310 [ 441.445601][ T5440] simple_copy_to_iter+0x4c/0x60 [ 441.450524][ T5440] ? skb_copy_datagram_iter+0xc0/0xc0 [ 441.455879][ T5440] __skb_datagram_iter+0xac/0x520 [ 441.460900][ T5440] ? ___cache_free+0x3c/0x300 [ 441.465562][ T5440] ? kfree+0xf0/0x1d0 [ 441.469528][ T5440] ? __kfree_skb+0xfe/0x150 [ 441.474096][ T5440] skb_copy_datagram_iter+0x39/0xc0 [ 441.479286][ T5440] unix_stream_read_actor+0x40/0x60 [ 441.485052][ T5440] unix_stream_read_generic+0x691/0x1260 [ 441.490670][ T5440] ? init_wait_entry+0x30/0x30 [ 441.495425][ T5440] unix_stream_recvmsg+0x63/0x90 [ 441.500354][ T5440] ? init_peercred+0x180/0x180 [ 441.505150][ T5440] ? unix_stream_sendmsg+0xa90/0xa90 [ 441.510441][ T5440] ____sys_recvmsg+0x15d/0x310 [ 441.515364][ T5440] ? __import_iovec+0x1ff/0x270 [ 441.520234][ T5440] ? import_iovec+0x69/0x80 [ 441.524770][ T5440] do_recvmmsg+0x34c/0x9e0 [ 441.529254][ T5440] ? do_anonymous_page+0x411/0x8b0 [ 441.534525][ T5440] ? fsnotify_perm+0x59/0x2e0 [ 441.539267][ T5440] ? __fsnotify_parent+0x32f/0x430 [ 441.544380][ T5440] ? __fget_light+0x21b/0x260 [ 441.549130][ T5440] ? __cond_resched+0x11/0x40 [ 441.553835][ T5440] __x64_sys_recvmmsg+0xcf/0x150 [ 441.558756][ T5440] ? exit_to_user_mode_prepare+0x65/0x190 [ 441.564548][ T5440] do_syscall_64+0x4a/0x90 [ 441.569017][ T5440] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 441.575006][ T5440] RIP: 0033:0x4665d9 [ 441.578977][ T5440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 441.598740][ T5440] RSP: 002b:00007f269420c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 441.607148][ T5440] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 441.615119][ T5440] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 441.623073][ T5440] RBP: 00007f269420c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 441.631061][ T5440] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 441.639035][ T5440] R13: 00007fff05d995ff R14: 00007f269420c300 R15: 0000000000022000 09:49:08 executing program 2 (fault-call:8 fault-nth:72): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000010000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x8f26000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:08 executing program 3: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x46681) 09:49:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040401000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:08 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03009080000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xa503000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:08 executing program 3: syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffd, 0x141) 09:49:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:08 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x40f0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x3703) 09:49:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xa603000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:08 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x680f1) ioctl$EVIOCGVERSION(r0, 0x6611, 0x0) [ 442.042256][ T5484] loop5: detected capacity change from 0 to 6 [ 442.048576][ T5490] loop1: detected capacity change from 0 to 1 [ 442.062363][ T5484] FAT-fs (loop5): bogus number of FAT sectors [ 442.068468][ T5484] FAT-fs (loop5): Can't find a valid FAT filesystem [ 442.109959][ T5490] loop1: p2 p3 p4 [ 442.114922][ T5490] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 442.133031][ T5490] loop1: p3 start 225 is beyond EOD, truncated [ 442.139225][ T5490] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 442.158895][ T5484] loop5: detected capacity change from 0 to 6 [ 442.181505][ T5484] FAT-fs (loop5): bogus number of FAT sectors [ 442.187615][ T5484] FAT-fs (loop5): Can't find a valid FAT filesystem [ 442.207121][ T5490] loop1: detected capacity change from 0 to 1 [ 442.259244][ T5494] FAULT_INJECTION: forcing a failure. [ 442.259244][ T5494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.272337][ T5494] CPU: 1 PID: 5494 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 442.278799][ T5490] loop1: p2 p3 p4 [ 442.282524][ T5494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.294804][ T5490] loop1: p2 size 1073872896 extends beyond EOD, [ 442.296727][ T5494] Call Trace: [ 442.296738][ T5494] dump_stack+0x137/0x19d [ 442.303174][ T5490] truncated [ 442.306428][ T5494] should_fail+0x23c/0x250 [ 442.312276][ T5490] loop1: p3 start 225 is beyond EOD, [ 442.313899][ T5494] should_fail_usercopy+0x16/0x20 [ 442.318315][ T5490] truncated [ 442.318322][ T5490] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 442.339447][ T5494] _copy_to_iter+0x17c/0xdd0 [ 442.344065][ T5494] ? __perf_event_task_sched_in+0x471/0x4c0 [ 442.350121][ T5494] ? check_stack_object+0x61/0x70 [ 442.355187][ T5494] ? __virt_addr_valid+0x15a/0x1a0 [ 442.360434][ T5494] ? __check_object_size+0x253/0x310 [ 442.365746][ T5494] simple_copy_to_iter+0x4c/0x60 [ 442.370696][ T5494] __skb_datagram_iter+0x23c/0x520 [ 442.375808][ T5494] ? skb_copy_datagram_iter+0xc0/0xc0 [ 442.381277][ T5494] skb_copy_datagram_iter+0x39/0xc0 [ 442.386478][ T5494] unix_stream_read_actor+0x40/0x60 [ 442.391698][ T5494] unix_stream_read_generic+0x691/0x1260 [ 442.398648][ T5494] ? init_wait_entry+0x30/0x30 [ 442.403429][ T5494] unix_stream_recvmsg+0x63/0x90 [ 442.408406][ T5494] ? init_peercred+0x180/0x180 [ 442.413166][ T5494] ? unix_stream_sendmsg+0xa90/0xa90 [ 442.418457][ T5494] ____sys_recvmsg+0x15d/0x310 [ 442.423281][ T5494] ? __import_iovec+0x1ff/0x270 [ 442.428161][ T5494] ? import_iovec+0x69/0x80 [ 442.432666][ T5494] do_recvmmsg+0x34c/0x9e0 [ 442.437107][ T5494] ? do_anonymous_page+0x411/0x8b0 [ 442.442343][ T5494] ? fsnotify_perm+0x59/0x2e0 [ 442.447036][ T5494] ? __fsnotify_parent+0x32f/0x430 [ 442.452222][ T5494] ? __fget_light+0x21b/0x260 [ 442.456949][ T5494] ? __cond_resched+0x11/0x40 [ 442.461626][ T5494] __x64_sys_recvmmsg+0xcf/0x150 [ 442.466563][ T5494] ? exit_to_user_mode_prepare+0x65/0x190 [ 442.472767][ T5494] do_syscall_64+0x4a/0x90 [ 442.477524][ T5494] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 442.483692][ T5494] RIP: 0033:0x4665d9 [ 442.487733][ T5494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 442.507450][ T5494] RSP: 002b:00007f269420c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 442.515865][ T5494] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 442.524148][ T5494] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 442.532269][ T5494] RBP: 00007f269420c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 442.540271][ T5494] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 442.548287][ T5494] R13: 00007fff05d995ff R14: 00007f269420c300 R15: 0000000000022000 09:49:09 executing program 2 (fault-call:8 fault-nth:73): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xaf26000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:09 executing program 3: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) 09:49:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040501000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:09 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff0326a780000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xbc26000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:09 executing program 3: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) 09:49:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 442.922838][ T5562] loop5: detected capacity change from 0 to 6 [ 442.929064][ T5559] loop1: detected capacity change from 0 to 1 [ 442.946321][ T5562] FAT-fs (loop5): bogus sectors per cluster 5 [ 442.952626][ T5562] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xbf26000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040601000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 442.973147][ T5559] loop1: p2 p3 p4 [ 442.978770][ T5559] loop1: p2 size 1073872896 extends beyond EOD, truncated 09:49:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 443.016440][ T5559] loop1: p3 start 225 is beyond EOD, truncated [ 443.022695][ T5559] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 443.080647][ T5592] loop5: detected capacity change from 0 to 6 [ 443.089098][ T5592] FAT-fs (loop5): bogus sectors per cluster 6 [ 443.095308][ T5592] FAT-fs (loop5): Can't find a valid FAT filesystem [ 443.123497][ T5603] FAULT_INJECTION: forcing a failure. [ 443.123497][ T5603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.136596][ T5603] CPU: 1 PID: 5603 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 443.146720][ T5603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.156791][ T5603] Call Trace: [ 443.160068][ T5603] dump_stack+0x137/0x19d [ 443.164411][ T5603] should_fail+0x23c/0x250 [ 443.168835][ T5603] should_fail_usercopy+0x16/0x20 [ 443.173939][ T5603] _copy_to_iter+0x17c/0xdd0 [ 443.178562][ T5603] ? check_stack_object+0x61/0x70 [ 443.183591][ T5603] ? __virt_addr_valid+0x15a/0x1a0 [ 443.188704][ T5603] ? __check_object_size+0x253/0x310 [ 443.194044][ T5603] simple_copy_to_iter+0x4c/0x60 [ 443.198990][ T5603] ? skb_copy_datagram_iter+0xc0/0xc0 [ 443.204384][ T5603] __skb_datagram_iter+0xac/0x520 [ 443.209433][ T5603] ? ___cache_free+0x3c/0x300 [ 443.214120][ T5603] ? kfree+0xf0/0x1d0 [ 443.218106][ T5603] ? __kfree_skb+0xfe/0x150 [ 443.222701][ T5603] skb_copy_datagram_iter+0x39/0xc0 [ 443.227909][ T5603] unix_stream_read_actor+0x40/0x60 [ 443.233111][ T5603] unix_stream_read_generic+0x691/0x1260 [ 443.238775][ T5603] unix_stream_recvmsg+0x63/0x90 [ 443.243742][ T5603] ? init_peercred+0x180/0x180 [ 443.248519][ T5603] ? unix_stream_sendmsg+0xa90/0xa90 [ 443.253890][ T5603] ____sys_recvmsg+0x15d/0x310 [ 443.258663][ T5603] ? __import_iovec+0x1ff/0x270 [ 443.263514][ T5603] ? import_iovec+0x69/0x80 [ 443.268022][ T5603] do_recvmmsg+0x34c/0x9e0 [ 443.272438][ T5603] ? do_anonymous_page+0x411/0x8b0 [ 443.277556][ T5603] ? fsnotify_perm+0x59/0x2e0 [ 443.282231][ T5603] ? __fsnotify_parent+0x32f/0x430 [ 443.287387][ T5603] ? __fget_light+0x21b/0x260 [ 443.292172][ T5603] ? __cond_resched+0x11/0x40 [ 443.296852][ T5603] __x64_sys_recvmmsg+0xcf/0x150 [ 443.301795][ T5603] ? exit_to_user_mode_prepare+0x65/0x190 [ 443.307583][ T5603] do_syscall_64+0x4a/0x90 [ 443.312006][ T5603] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 443.317907][ T5603] RIP: 0033:0x4665d9 [ 443.321885][ T5603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 443.341583][ T5603] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 443.350090][ T5603] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 443.358149][ T5603] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 443.366122][ T5603] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 443.374108][ T5603] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 443.382093][ T5603] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 443.409416][ T5592] loop5: detected capacity change from 0 to 6 [ 443.416598][ T5592] FAT-fs (loop5): bogus sectors per cluster 6 [ 443.422725][ T5592] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:10 executing program 2 (fault-call:8 fault-nth:74): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:10 executing program 3: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 09:49:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xd601000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:10 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff030bba80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040701000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xd701000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:10 executing program 3: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) 09:49:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040801000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 443.790731][ T5618] loop1: detected capacity change from 0 to 1 [ 443.794816][ T5621] loop5: detected capacity change from 0 to 6 [ 443.804624][ T5621] FAT-fs (loop5): bogus sectors per cluster 7 [ 443.810731][ T5621] FAT-fs (loop5): Can't find a valid FAT filesystem [ 443.823816][ T5618] loop1: p2 p3 p4 [ 443.831327][ T5618] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 443.855813][ T5618] loop1: p3 start 225 is beyond EOD, truncated [ 443.862051][ T5618] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xdaffffff00000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 443.902427][ T5646] loop5: detected capacity change from 0 to 6 [ 443.930811][ T5646] FAT-fs (loop5): bogus number of FAT sectors [ 443.936934][ T5646] FAT-fs (loop5): Can't find a valid FAT filesystem [ 443.967622][ T5657] FAULT_INJECTION: forcing a failure. [ 443.967622][ T5657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.980830][ T5657] CPU: 1 PID: 5657 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 443.981219][ T5618] loop1: detected capacity change from 0 to 1 [ 443.991037][ T5657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.991051][ T5657] Call Trace: [ 443.991059][ T5657] dump_stack+0x137/0x19d [ 443.991085][ T5657] should_fail+0x23c/0x250 [ 443.991106][ T5657] should_fail_usercopy+0x16/0x20 [ 444.024268][ T5657] _copy_to_iter+0x17c/0xdd0 [ 444.028943][ T5657] ? check_stack_object+0x61/0x70 [ 444.034185][ T5657] ? __virt_addr_valid+0x15a/0x1a0 [ 444.039323][ T5657] ? __check_object_size+0x253/0x310 [ 444.044705][ T5657] simple_copy_to_iter+0x4c/0x60 [ 444.049733][ T5657] __skb_datagram_iter+0x23c/0x520 [ 444.055148][ T5657] ? skb_copy_datagram_iter+0xc0/0xc0 [ 444.060544][ T5657] skb_copy_datagram_iter+0x39/0xc0 [ 444.065796][ T5657] unix_stream_read_actor+0x40/0x60 [ 444.070995][ T5657] unix_stream_read_generic+0x691/0x1260 [ 444.076628][ T5657] unix_stream_recvmsg+0x63/0x90 [ 444.081621][ T5657] ? init_peercred+0x180/0x180 [ 444.086410][ T5657] ? unix_stream_sendmsg+0xa90/0xa90 [ 444.091767][ T5657] ____sys_recvmsg+0x15d/0x310 [ 444.096539][ T5657] ? __import_iovec+0x1ff/0x270 [ 444.101395][ T5657] ? import_iovec+0x69/0x80 [ 444.105905][ T5657] do_recvmmsg+0x34c/0x9e0 [ 444.110321][ T5657] ? do_anonymous_page+0x411/0x8b0 [ 444.115435][ T5657] ? fsnotify_perm+0x59/0x2e0 [ 444.120111][ T5657] ? __fsnotify_parent+0x32f/0x430 [ 444.125475][ T5657] ? __fget_light+0x21b/0x260 [ 444.130219][ T5657] ? __cond_resched+0x11/0x40 [ 444.134973][ T5657] __x64_sys_recvmmsg+0xcf/0x150 [ 444.139920][ T5657] ? exit_to_user_mode_prepare+0x65/0x190 [ 444.145642][ T5657] do_syscall_64+0x4a/0x90 [ 444.150086][ T5657] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 444.156132][ T5657] RIP: 0033:0x4665d9 [ 444.160030][ T5657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 444.179761][ T5657] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 444.188395][ T5657] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 444.196516][ T5657] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 444.204706][ T5657] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 444.212809][ T5657] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 444.220964][ T5657] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 444.272735][ T5646] loop5: detected capacity change from 0 to 6 [ 444.283566][ T5646] FAT-fs (loop5): bogus number of FAT sectors [ 444.283636][ T5618] loop1: p2 p3 p4 [ 444.283684][ T5618] loop1: p2 size 1073872896 extends beyond EOD, [ 444.289745][ T5646] FAT-fs (loop5): Can't find a valid FAT filesystem [ 444.293485][ T5618] truncated [ 444.306021][ T5618] loop1: p3 start 225 is beyond EOD, truncated [ 444.315884][ T5618] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 444.392119][ T1032] loop1: p2 p3 p4 [ 444.396188][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 444.404381][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 444.413383][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xdb01000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:10 executing program 2 (fault-call:8 fault-nth:75): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:10 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000001440), 0xfffffffffffffffe) 09:49:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:10 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff030bbb80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040901000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xe5ffffff00000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:10 executing program 3: open$dir(&(0x7f0000000380)='./file0\x00', 0xc72836acd740fa9, 0x0) 09:49:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 444.654639][ T5688] loop5: detected capacity change from 0 to 6 [ 444.660870][ T5689] loop1: detected capacity change from 0 to 1 [ 444.674006][ T5688] FAT-fs (loop5): bogus sectors per cluster 9 [ 444.680178][ T5688] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xf0ffffff00000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:10 executing program 3: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 444.706746][ T5689] loop1: p2 p3 p4 [ 444.714744][ T5689] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 444.725206][ T5688] loop5: detected capacity change from 0 to 6 [ 444.731770][ T5689] loop1: p3 start 225 is beyond EOD, truncated [ 444.737988][ T5689] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 444.745713][ T5688] FAT-fs (loop5): bogus sectors per cluster 9 [ 444.751863][ T5688] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:11 executing program 3: perf_event_open$cgroup(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc21, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 444.839036][ T5693] FAULT_INJECTION: forcing a failure. [ 444.839036][ T5693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.852176][ T5693] CPU: 1 PID: 5693 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 444.862249][ T5693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.872335][ T5693] Call Trace: [ 444.875613][ T5693] dump_stack+0x137/0x19d [ 444.879959][ T5693] should_fail+0x23c/0x250 [ 444.884385][ T5693] should_fail_usercopy+0x16/0x20 [ 444.889471][ T5693] _copy_to_iter+0x17c/0xdd0 [ 444.894072][ T5693] ? check_stack_object+0x61/0x70 [ 444.899098][ T5693] ? __virt_addr_valid+0x15a/0x1a0 [ 444.904222][ T5693] ? __check_object_size+0x253/0x310 [ 444.909514][ T5693] simple_copy_to_iter+0x4c/0x60 [ 444.914484][ T5693] ? skb_copy_datagram_iter+0xc0/0xc0 [ 444.919877][ T5693] __skb_datagram_iter+0xac/0x520 [ 444.924904][ T5693] ? ___cache_free+0x3c/0x300 [ 444.929625][ T5693] ? kfree+0xf0/0x1d0 [ 444.933672][ T5693] ? __kfree_skb+0xfe/0x150 [ 444.938199][ T5693] skb_copy_datagram_iter+0x39/0xc0 [ 444.943431][ T5693] unix_stream_read_actor+0x40/0x60 [ 444.948638][ T5693] unix_stream_read_generic+0x691/0x1260 [ 444.954386][ T5693] ? init_wait_entry+0x30/0x30 [ 444.959153][ T5693] unix_stream_recvmsg+0x63/0x90 [ 444.964116][ T5693] ? init_peercred+0x180/0x180 [ 444.968877][ T5693] ? unix_stream_sendmsg+0xa90/0xa90 [ 444.974167][ T5693] ____sys_recvmsg+0x15d/0x310 [ 444.979032][ T5693] ? __import_iovec+0x1ff/0x270 [ 444.983888][ T5693] ? import_iovec+0x69/0x80 [ 444.988485][ T5693] do_recvmmsg+0x34c/0x9e0 [ 444.992901][ T5693] ? do_anonymous_page+0x411/0x8b0 [ 444.998038][ T5693] ? fsnotify_perm+0x59/0x2e0 [ 445.002761][ T5693] ? __fsnotify_parent+0x32f/0x430 [ 445.007912][ T5693] ? __fget_light+0x21b/0x260 [ 445.012593][ T5693] ? __cond_resched+0x11/0x40 [ 445.017278][ T5693] __x64_sys_recvmmsg+0xcf/0x150 [ 445.022223][ T5693] ? exit_to_user_mode_prepare+0x65/0x190 [ 445.027951][ T5693] do_syscall_64+0x4a/0x90 [ 445.032429][ T5693] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 445.038347][ T5693] RIP: 0033:0x4665d9 [ 445.042270][ T5693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 445.061894][ T5693] RSP: 002b:00007f269420c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 445.070327][ T5693] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 445.078310][ T5693] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 445.086373][ T5693] RBP: 00007f269420c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 445.094524][ T5693] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 445.102514][ T5693] R13: 00007fff05d995ff R14: 00007f269420c300 R15: 0000000000022000 09:49:11 executing program 2 (fault-call:8 fault-nth:76): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040a01000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xf6ffffff00000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:49:11 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff030bbc80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x900000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xf9fdffff00000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 445.528412][ T5746] loop5: detected capacity change from 0 to 6 [ 445.546100][ T5745] loop1: detected capacity change from 0 to 1 [ 445.561534][ T5746] FAT-fs (loop5): bogus sectors per cluster 10 [ 445.567722][ T5746] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[{0x10}], 0x10}, 0x1) 09:49:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xfdfdffff00000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 445.581015][ T5745] loop1: p2 p3 p4 [ 445.585005][ T5745] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 445.592906][ T5745] loop1: p3 start 225 is beyond EOD, truncated [ 445.599175][ T5745] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 445.619378][ T5746] loop5: detected capacity change from 0 to 6 [ 445.639339][ T5745] loop1: detected capacity change from 0 to 1 [ 445.672175][ T5746] FAT-fs (loop5): bogus sectors per cluster 10 [ 445.676394][ T5745] loop1: p2 p3 p4 [ 445.678390][ T5746] FAT-fs (loop5): Can't find a valid FAT filesystem [ 445.682839][ T5745] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 445.700286][ T5745] loop1: p3 start 225 is beyond EOD, truncated [ 445.706622][ T5745] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 445.719489][ T5789] FAULT_INJECTION: forcing a failure. [ 445.719489][ T5789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.732582][ T5789] CPU: 1 PID: 5789 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 445.743927][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.753986][ T5789] Call Trace: [ 445.757268][ T5789] dump_stack+0x137/0x19d [ 445.761678][ T5789] should_fail+0x23c/0x250 [ 445.766555][ T5789] should_fail_usercopy+0x16/0x20 [ 445.771675][ T5789] _copy_to_iter+0x17c/0xdd0 [ 445.777118][ T5789] ? check_stack_object+0x61/0x70 [ 445.782326][ T5789] ? __virt_addr_valid+0x15a/0x1a0 [ 445.787660][ T5789] ? __check_object_size+0x253/0x310 [ 445.792956][ T5789] simple_copy_to_iter+0x4c/0x60 [ 445.797919][ T5789] __skb_datagram_iter+0x23c/0x520 [ 445.803051][ T5789] ? skb_copy_datagram_iter+0xc0/0xc0 [ 445.808625][ T5789] skb_copy_datagram_iter+0x39/0xc0 [ 445.814240][ T5789] unix_stream_read_actor+0x40/0x60 [ 445.819760][ T5789] unix_stream_read_generic+0x691/0x1260 [ 445.825927][ T5789] ? sysvec_call_function_single+0xa/0x80 [ 445.831759][ T5789] unix_stream_recvmsg+0x63/0x90 [ 445.836766][ T5789] ? init_peercred+0x180/0x180 [ 445.841529][ T5789] ? unix_stream_sendmsg+0xa90/0xa90 [ 445.846835][ T5789] ____sys_recvmsg+0x15d/0x310 [ 445.852037][ T5789] ? __import_iovec+0x1ff/0x270 [ 445.856978][ T5789] ? import_iovec+0x69/0x80 [ 445.861513][ T5789] do_recvmmsg+0x34c/0x9e0 [ 445.865930][ T5789] ? do_anonymous_page+0x411/0x8b0 [ 445.871050][ T5789] ? fsnotify_perm+0x59/0x2e0 [ 445.875749][ T5789] ? __fsnotify_parent+0x32f/0x430 [ 445.881411][ T5789] ? __fget_light+0x21b/0x260 [ 445.886105][ T5789] ? __cond_resched+0x11/0x40 [ 445.890881][ T5789] __x64_sys_recvmmsg+0xcf/0x150 [ 445.895823][ T5789] ? exit_to_user_mode_prepare+0x65/0x190 [ 445.901640][ T5789] do_syscall_64+0x4a/0x90 [ 445.906083][ T5789] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 445.911993][ T5789] RIP: 0033:0x4665d9 [ 445.916047][ T5789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 445.939501][ T5789] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 445.947921][ T5789] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 445.955893][ T5789] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 445.963918][ T5789] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 445.971887][ T5789] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 445.979860][ T5789] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 09:49:12 executing program 2 (fault-call:8 fault-nth:77): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xfeffffff00000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:12 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000007640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000008140)={0x0, 0x0, &(0x7f0000007d40)=[{0x0}, {&(0x7f0000007780)="e3", 0x1}, {&(0x7f0000007840)="14", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 09:49:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:12 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff030bbd80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040b01000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:12 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000007640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000008140)={0x0, 0x0, &(0x7f0000007d40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000007e00)=[{0x10}], 0x10}, 0x0) 09:49:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xff0f000000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:12 executing program 3: perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 446.407378][ T5805] loop5: detected capacity change from 0 to 6 [ 446.411316][ T5810] loop1: detected capacity change from 0 to 1 [ 446.425544][ T5805] FAT-fs (loop5): bogus sectors per cluster 11 [ 446.431757][ T5805] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040c01000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xfffdffff00000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 446.461359][ T5810] loop1: p2 p3 p4 [ 446.465482][ T5810] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 446.475448][ T5810] loop1: p3 start 225 is beyond EOD, truncated [ 446.481682][ T5810] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 446.548570][ T5810] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 446.573177][ T5810] loop1: detected capacity change from 0 to 1 [ 446.591309][ T5841] loop5: detected capacity change from 0 to 6 [ 446.615752][ T5810] loop1: p2 p3 p4 [ 446.616497][ T5841] FAT-fs (loop5): bogus sectors per cluster 12 [ 446.625694][ T5841] FAT-fs (loop5): Can't find a valid FAT filesystem [ 446.626244][ T5810] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 446.634640][ T5811] FAULT_INJECTION: forcing a failure. [ 446.634640][ T5811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.640068][ T5810] loop1: p3 start 225 is beyond EOD, truncated [ 446.652489][ T5811] CPU: 0 PID: 5811 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 446.658642][ T5810] loop1: p4 size 3657465856 extends beyond EOD, [ 446.668683][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.668697][ T5811] Call Trace: [ 446.668706][ T5811] dump_stack+0x137/0x19d [ 446.675044][ T5810] truncated [ 446.695792][ T5811] should_fail+0x23c/0x250 [ 446.700209][ T5811] should_fail_usercopy+0x16/0x20 [ 446.705232][ T5811] _copy_to_iter+0x17c/0xdd0 [ 446.709838][ T5811] ? finish_task_switch+0xce/0x290 [ 446.714961][ T5811] ? check_stack_object+0x61/0x70 [ 446.720026][ T5811] ? __virt_addr_valid+0x15a/0x1a0 [ 446.725298][ T5811] ? __check_object_size+0x253/0x310 [ 446.730620][ T5811] simple_copy_to_iter+0x4c/0x60 [ 446.735654][ T5811] ? skb_copy_datagram_iter+0xc0/0xc0 [ 446.741034][ T5811] __skb_datagram_iter+0xac/0x520 [ 446.746064][ T5811] ? ___cache_free+0x3c/0x300 [ 446.750786][ T5811] ? kfree+0xf0/0x1d0 [ 446.754821][ T5811] ? __kfree_skb+0xfe/0x150 [ 446.759332][ T5811] skb_copy_datagram_iter+0x39/0xc0 [ 446.764531][ T5811] unix_stream_read_actor+0x40/0x60 [ 446.769926][ T5811] unix_stream_read_generic+0x691/0x1260 [ 446.775702][ T5811] unix_stream_recvmsg+0x63/0x90 [ 446.780704][ T5811] ? init_peercred+0x180/0x180 [ 446.785479][ T5811] ? unix_stream_sendmsg+0xa90/0xa90 [ 446.790773][ T5811] ____sys_recvmsg+0x15d/0x310 [ 446.795541][ T5811] ? __import_iovec+0x1ff/0x270 [ 446.800470][ T5811] ? import_iovec+0x69/0x80 [ 446.804976][ T5811] do_recvmmsg+0x34c/0x9e0 [ 446.809414][ T5811] ? do_anonymous_page+0x411/0x8b0 [ 446.814565][ T5811] ? fsnotify_perm+0x59/0x2e0 [ 446.819240][ T5811] ? __fsnotify_parent+0x32f/0x430 [ 446.824392][ T5811] ? __fget_light+0x21b/0x260 [ 446.829119][ T5811] ? __cond_resched+0x11/0x40 [ 446.833889][ T5811] __x64_sys_recvmmsg+0xcf/0x150 [ 446.838881][ T5811] ? exit_to_user_mode_prepare+0x65/0x190 [ 446.844603][ T5811] do_syscall_64+0x4a/0x90 [ 446.849050][ T5811] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 446.854949][ T5811] RIP: 0033:0x4665d9 [ 446.858859][ T5811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 446.878664][ T5811] RSP: 002b:00007f269420c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 446.887079][ T5811] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 446.895159][ T5811] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 446.903740][ T5811] RBP: 00007f269420c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 446.911712][ T5811] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 446.919679][ T5811] R13: 00007fff05d995ff R14: 00007f269420c300 R15: 0000000000022000 [ 446.933471][ T1032] loop1: p2 p3 p4 [ 446.937357][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 446.944951][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 446.951175][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 446.972770][ T5841] loop5: detected capacity change from 0 to 6 [ 446.979306][ T5841] FAT-fs (loop5): bogus sectors per cluster 12 [ 446.985493][ T5841] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xffff1f0000000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040d01000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:13 executing program 3: r0 = gettid() perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:49:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:13 executing program 2 (fault-call:8 fault-nth:78): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:13 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff0300c080000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:13 executing program 3: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x56c3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xffffff7f00000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:13 executing program 3: perf_event_open$cgroup(&(0x7f0000001980)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) 09:49:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0xffffffff00000000, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 447.300109][ T5885] loop5: detected capacity change from 0 to 6 [ 447.306465][ T5883] loop1: detected capacity change from 0 to 1 [ 447.320137][ T5885] FAT-fs (loop5): bogus sectors per cluster 13 [ 447.326413][ T5885] FAT-fs (loop5): Can't find a valid FAT filesystem [ 447.371283][ T5883] loop1: p2 p3 p4 [ 447.379470][ T5883] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 447.389444][ T5885] loop5: detected capacity change from 0 to 6 [ 447.391938][ T5883] loop1: p3 start 225 is beyond EOD, truncated [ 447.401918][ T5883] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 447.409823][ T5885] FAT-fs (loop5): bogus sectors per cluster 13 [ 447.416037][ T5885] FAT-fs (loop5): Can't find a valid FAT filesystem [ 447.466122][ T5918] FAULT_INJECTION: forcing a failure. [ 447.466122][ T5918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.479426][ T5918] CPU: 1 PID: 5918 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 447.489843][ T5918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.500161][ T5918] Call Trace: [ 447.503446][ T5918] dump_stack+0x137/0x19d [ 447.507793][ T5918] should_fail+0x23c/0x250 [ 447.512559][ T5918] should_fail_usercopy+0x16/0x20 [ 447.517634][ T5918] _copy_to_iter+0x17c/0xdd0 [ 447.522232][ T5918] ? finish_task_switch+0xce/0x290 [ 447.527589][ T5918] ? check_stack_object+0x61/0x70 [ 447.532640][ T5918] ? __virt_addr_valid+0x15a/0x1a0 [ 447.537997][ T5918] ? __check_object_size+0x253/0x310 [ 447.543550][ T5918] simple_copy_to_iter+0x4c/0x60 [ 447.548529][ T5918] __skb_datagram_iter+0x23c/0x520 [ 447.553642][ T5918] ? skb_copy_datagram_iter+0xc0/0xc0 [ 447.559169][ T5918] skb_copy_datagram_iter+0x39/0xc0 [ 447.564484][ T5918] unix_stream_read_actor+0x40/0x60 [ 447.569691][ T5918] unix_stream_read_generic+0x691/0x1260 [ 447.575674][ T5918] unix_stream_recvmsg+0x63/0x90 [ 447.580691][ T5918] ? init_peercred+0x180/0x180 [ 447.585499][ T5918] ? unix_stream_sendmsg+0xa90/0xa90 [ 447.590868][ T5918] ____sys_recvmsg+0x15d/0x310 [ 447.595698][ T5918] ? __import_iovec+0x1ff/0x270 [ 447.600554][ T5918] ? import_iovec+0x69/0x80 [ 447.605079][ T5918] do_recvmmsg+0x34c/0x9e0 [ 447.609582][ T5918] ? do_anonymous_page+0x411/0x8b0 [ 447.614756][ T5918] ? fsnotify_perm+0x59/0x2e0 [ 447.619463][ T5918] ? __fsnotify_parent+0x32f/0x430 [ 447.624581][ T5918] ? __fget_light+0x21b/0x260 [ 447.629265][ T5918] ? __cond_resched+0x11/0x40 [ 447.633943][ T5918] __x64_sys_recvmmsg+0xcf/0x150 [ 447.638884][ T5918] ? exit_to_user_mode_prepare+0x65/0x190 [ 447.644610][ T5918] do_syscall_64+0x4a/0x90 [ 447.649087][ T5918] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 447.655006][ T5918] RIP: 0033:0x4665d9 [ 447.658899][ T5918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 447.679264][ T5918] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 447.687709][ T5918] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 447.695780][ T5918] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 447.703770][ T5918] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 447.711748][ T5918] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 447.719722][ T5918] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 447.728852][ T5883] loop1: detected capacity change from 0 to 1 09:49:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x4}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:14 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140)) 09:49:14 executing program 2 (fault-call:8 fault-nth:79): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040e01000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:14 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff0304f580000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x300}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x500}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x541b, 0x0) 09:49:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x602}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:14 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x40800) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000140)) [ 448.165400][ T5938] loop5: detected capacity change from 0 to 6 [ 448.175719][ T5945] loop1: detected capacity change from 0 to 1 [ 448.182530][ T5938] FAT-fs (loop5): bogus sectors per cluster 14 [ 448.188807][ T5938] FAT-fs (loop5): Can't find a valid FAT filesystem [ 448.246171][ T5945] loop1: p2 p3 p4 [ 448.250473][ T5945] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 448.262946][ T5945] loop1: p3 start 225 is beyond EOD, truncated [ 448.262972][ T5938] loop5: detected capacity change from 0 to 6 [ 448.269161][ T5945] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 448.298648][ T5938] FAT-fs (loop5): bogus sectors per cluster 14 [ 448.305071][ T5938] FAT-fs (loop5): Can't find a valid FAT filesystem [ 448.404543][ T5985] FAULT_INJECTION: forcing a failure. [ 448.404543][ T5985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.417627][ T5985] CPU: 0 PID: 5985 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 448.427675][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.437766][ T5985] Call Trace: [ 448.441096][ T5985] dump_stack+0x137/0x19d [ 448.445428][ T5985] should_fail+0x23c/0x250 [ 448.449839][ T5985] should_fail_usercopy+0x16/0x20 [ 448.454851][ T5985] _copy_to_iter+0x17c/0xdd0 [ 448.459509][ T5985] ? finish_task_switch+0xce/0x290 [ 448.464608][ T5985] ? check_stack_object+0x61/0x70 [ 448.469616][ T5985] ? __virt_addr_valid+0x15a/0x1a0 [ 448.474710][ T5985] ? __check_object_size+0x253/0x310 [ 448.480042][ T5985] simple_copy_to_iter+0x4c/0x60 [ 448.484982][ T5985] ? skb_copy_datagram_iter+0xc0/0xc0 [ 448.490399][ T5985] __skb_datagram_iter+0xac/0x520 [ 448.495428][ T5985] ? ___cache_free+0x3c/0x300 [ 448.500245][ T5985] ? kfree+0xf0/0x1d0 [ 448.504221][ T5985] ? __kfree_skb+0xfe/0x150 [ 448.508708][ T5985] skb_copy_datagram_iter+0x39/0xc0 [ 448.513943][ T5985] unix_stream_read_actor+0x40/0x60 [ 448.519172][ T5985] unix_stream_read_generic+0x691/0x1260 [ 448.524786][ T5985] ? init_wait_entry+0x30/0x30 [ 448.529647][ T5985] unix_stream_recvmsg+0x63/0x90 [ 448.534609][ T5985] ? init_peercred+0x180/0x180 [ 448.539461][ T5985] ? unix_stream_sendmsg+0xa90/0xa90 [ 448.544777][ T5985] ____sys_recvmsg+0x15d/0x310 [ 448.549539][ T5985] ? __import_iovec+0x1ff/0x270 [ 448.554372][ T5985] ? import_iovec+0x69/0x80 [ 448.558857][ T5985] do_recvmmsg+0x34c/0x9e0 [ 448.563256][ T5985] ? __fsnotify_parent+0x32f/0x430 [ 448.568484][ T5985] ? __fget_light+0x21b/0x260 [ 448.573150][ T5985] ? __cond_resched+0x11/0x40 [ 448.577837][ T5985] __x64_sys_recvmmsg+0xcf/0x150 [ 448.582770][ T5985] ? exit_to_user_mode_prepare+0x65/0x190 [ 448.588491][ T5985] do_syscall_64+0x4a/0x90 [ 448.592955][ T5985] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 448.598835][ T5985] RIP: 0033:0x4665d9 [ 448.602712][ T5985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 448.622340][ T5985] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 448.630753][ T5985] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 448.638707][ T5985] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 448.646673][ T5985] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 448.654626][ T5985] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 448.662618][ T5985] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 09:49:15 executing program 2 (fault-call:8 fault-nth:80): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x603}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040f01000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:15 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000680), 0x400, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 09:49:15 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03fffe80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x604}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:15 executing program 3: io_setup(0x7, &(0x7f0000005200)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x1, &(0x7f0000000bc0)=[&(0x7f0000000800)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 09:49:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400041001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 449.050893][ T5993] loop5: detected capacity change from 0 to 6 [ 449.062180][ T5993] FAT-fs (loop5): bogus sectors per cluster 15 [ 449.068356][ T5993] FAT-fs (loop5): Can't find a valid FAT filesystem [ 449.080746][ T6000] loop1: detected capacity change from 0 to 1 09:49:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x605}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 449.124449][ T6000] loop1: p2 p3 p4 [ 449.128548][ T6000] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 449.138965][ T6000] loop1: p3 start 225 is beyond EOD, truncated [ 449.145167][ T6000] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 449.173271][ T6019] loop5: detected capacity change from 0 to 6 [ 449.184848][ T6019] FAT-fs (loop5): bogus number of FAT sectors [ 449.190973][ T6019] FAT-fs (loop5): Can't find a valid FAT filesystem [ 449.209400][ T6000] loop1: detected capacity change from 0 to 1 [ 449.225825][ T6032] FAULT_INJECTION: forcing a failure. [ 449.225825][ T6032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.238918][ T6032] CPU: 1 PID: 6032 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 449.248986][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.259041][ T6032] Call Trace: [ 449.262337][ T6032] dump_stack+0x137/0x19d [ 449.266766][ T6032] should_fail+0x23c/0x250 [ 449.271220][ T6032] should_fail_usercopy+0x16/0x20 [ 449.276248][ T6032] _copy_to_iter+0x17c/0xdd0 [ 449.280851][ T6032] ? finish_task_switch+0xce/0x290 [ 449.286024][ T6032] ? check_stack_object+0x61/0x70 [ 449.291068][ T6032] ? __virt_addr_valid+0x15a/0x1a0 [ 449.296183][ T6032] ? __check_object_size+0x253/0x310 [ 449.301487][ T6032] simple_copy_to_iter+0x4c/0x60 [ 449.306478][ T6032] __skb_datagram_iter+0x23c/0x520 [ 449.311590][ T6032] ? skb_copy_datagram_iter+0xc0/0xc0 [ 449.316968][ T6032] skb_copy_datagram_iter+0x39/0xc0 [ 449.322175][ T6032] unix_stream_read_actor+0x40/0x60 [ 449.327375][ T6032] unix_stream_read_generic+0x691/0x1260 [ 449.333012][ T6032] unix_stream_recvmsg+0x63/0x90 [ 449.338132][ T6032] ? init_peercred+0x180/0x180 [ 449.345021][ T6032] ? unix_stream_sendmsg+0xa90/0xa90 [ 449.350419][ T6032] ____sys_recvmsg+0x15d/0x310 [ 449.355190][ T6032] ? __import_iovec+0x1ff/0x270 [ 449.360111][ T6032] ? import_iovec+0x69/0x80 [ 449.364671][ T6032] do_recvmmsg+0x34c/0x9e0 [ 449.369100][ T6032] ? do_anonymous_page+0x411/0x8b0 [ 449.374233][ T6032] ? fsnotify_perm+0x59/0x2e0 [ 449.378910][ T6032] ? __fsnotify_parent+0x32f/0x430 [ 449.384029][ T6032] ? __fget_light+0x21b/0x260 [ 449.388731][ T6032] ? __cond_resched+0x11/0x40 [ 449.393426][ T6032] __x64_sys_recvmmsg+0xcf/0x150 [ 449.398366][ T6032] ? exit_to_user_mode_prepare+0x65/0x190 [ 449.404184][ T6032] do_syscall_64+0x4a/0x90 [ 449.408606][ T6032] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 449.414503][ T6032] RIP: 0033:0x4665d9 [ 449.418396][ T6032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 449.438005][ T6032] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 449.446464][ T6032] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 449.454479][ T6032] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 449.462449][ T6032] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 449.470437][ T6032] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 449.478410][ T6032] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 449.502117][ T6000] loop1: p2 p3 p4 [ 449.508162][ T6000] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 449.515504][ T6019] loop5: detected capacity change from 0 to 6 [ 449.527784][ T6019] FAT-fs (loop5): bogus number of FAT sectors [ 449.533912][ T6019] FAT-fs (loop5): Can't find a valid FAT filesystem [ 449.553339][ T6000] loop1: p3 start 225 is beyond EOD, truncated [ 449.559522][ T6000] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:16 executing program 2 (fault-call:8 fault-nth:81): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x606}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002440), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40084503, 0x0) 09:49:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400041101000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:16 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff030fff80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x607}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:16 executing program 3: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0x3, r1, 0x0, 0x0, 0x0) [ 449.921582][ T6061] loop1: detected capacity change from 0 to 1 [ 449.927795][ T6063] loop5: detected capacity change from 0 to 6 [ 449.940791][ T6063] FAT-fs (loop5): bogus sectors per cluster 17 [ 449.946983][ T6063] FAT-fs (loop5): Can't find a valid FAT filesystem [ 449.955076][ T6061] loop1: p2 p3 p4 [ 449.959182][ T6061] loop1: p2 size 1073872896 extends beyond EOD, truncated 09:49:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x608}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:16 executing program 3: syz_io_uring_setup(0x3d5e, &(0x7f0000000300), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) [ 449.967379][ T6061] loop1: p3 start 225 is beyond EOD, truncated [ 449.973626][ T6061] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x609}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 450.045975][ T6061] loop1: detected capacity change from 0 to 1 [ 450.091162][ T1032] loop1: p2 p3 p4 [ 450.095966][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 450.098250][ T6060] FAULT_INJECTION: forcing a failure. [ 450.098250][ T6060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.116147][ T6060] CPU: 1 PID: 6060 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 450.126396][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.133332][ T1032] loop1: p3 start 225 is beyond EOD, [ 450.136460][ T6060] Call Trace: [ 450.136471][ T6060] dump_stack+0x137/0x19d [ 450.141862][ T1032] truncated [ 450.145149][ T6060] should_fail+0x23c/0x250 [ 450.149464][ T1032] loop1: p4 size 3657465856 extends beyond EOD, [ 450.152647][ T6060] should_fail_usercopy+0x16/0x20 [ 450.152671][ T6060] _copy_to_iter+0x17c/0xdd0 [ 450.157088][ T1032] truncated [ 450.176225][ T6060] ? check_stack_object+0x61/0x70 [ 450.181287][ T6060] ? __virt_addr_valid+0x15a/0x1a0 [ 450.186429][ T6060] ? __check_object_size+0x253/0x310 [ 450.191846][ T6060] simple_copy_to_iter+0x4c/0x60 [ 450.196883][ T6060] ? skb_copy_datagram_iter+0xc0/0xc0 [ 450.202243][ T6060] __skb_datagram_iter+0xac/0x520 [ 450.207273][ T6060] ? ___cache_free+0x3c/0x300 [ 450.211950][ T6060] ? kfree+0xf0/0x1d0 [ 450.215944][ T6060] ? __kfree_skb+0xfe/0x150 [ 450.220446][ T6060] skb_copy_datagram_iter+0x39/0xc0 [ 450.225655][ T6060] unix_stream_read_actor+0x40/0x60 [ 450.230836][ T6060] unix_stream_read_generic+0x691/0x1260 [ 450.236523][ T6060] ? init_wait_entry+0x30/0x30 [ 450.241287][ T6060] unix_stream_recvmsg+0x63/0x90 [ 450.246326][ T6060] ? init_peercred+0x180/0x180 [ 450.251109][ T6060] ? unix_stream_sendmsg+0xa90/0xa90 [ 450.256402][ T6060] ____sys_recvmsg+0x15d/0x310 [ 450.261294][ T6060] ? __import_iovec+0x1ff/0x270 [ 450.266327][ T6060] ? import_iovec+0x69/0x80 [ 450.270867][ T6060] do_recvmmsg+0x34c/0x9e0 [ 450.275338][ T6060] ? do_anonymous_page+0x411/0x8b0 [ 450.280451][ T6060] ? fsnotify_perm+0x59/0x2e0 [ 450.285191][ T6060] ? __fsnotify_parent+0x32f/0x430 [ 450.290299][ T6060] ? __fget_light+0x21b/0x260 [ 450.294984][ T6060] ? __cond_resched+0x11/0x40 [ 450.299646][ T6060] __x64_sys_recvmmsg+0xcf/0x150 [ 450.304590][ T6060] ? exit_to_user_mode_prepare+0x65/0x190 [ 450.310429][ T6060] do_syscall_64+0x4a/0x90 [ 450.314836][ T6060] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 450.320863][ T6060] RIP: 0033:0x4665d9 [ 450.324739][ T6060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 450.344352][ T6060] RSP: 002b:00007f269420c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 450.352862][ T6060] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 450.360870][ T6060] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 450.368913][ T6060] RBP: 00007f269420c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 450.376880][ T6060] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 450.384888][ T6060] R13: 00007fff05d995ff R14: 00007f269420c300 R15: 0000000000022000 [ 450.397149][ T6061] loop1: p2 p3 p4 [ 450.401344][ T6061] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 450.409281][ T6061] loop1: p3 start 225 is beyond EOD, truncated [ 450.415534][ T6061] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:17 executing program 2 (fault-call:8 fault-nth:82): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x60a}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400041201000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:17 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03feff80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:17 executing program 3: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @vsock={0x28, 0x0, 0x2710, @my=0x0}, @llc={0x1a, 0x102, 0x9, 0x0, 0x95, 0x9, @multicast}, @sco, 0x7f0, 0x0, 0x0, 0x0, 0x8b, &(0x7f0000000000)='veth1\x00', 0xffffffffffff1935, 0x3f, 0xa334}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000a00)={'gre0\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="74756e6c300f00"/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ac1414aae0fca301"]}) 09:49:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x60b}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5e01000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x60c}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:17 executing program 3: keyctl$search(0x14, 0x0, &(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0) [ 450.783414][ T6116] loop1: detected capacity change from 0 to 1 [ 450.819794][ T6123] loop5: detected capacity change from 0 to 6 09:49:17 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x301002, 0x0) syz_io_uring_setup(0x2a87, &(0x7f0000000540)={0x0, 0x864f, 0x29, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) [ 450.862204][ T6116] loop1: p2 p3 p4 [ 450.865999][ T6116] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 450.875042][ T6123] FAT-fs (loop5): bogus sectors per cluster 18 [ 450.881235][ T6123] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x60d}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 450.910307][ T6116] loop1: p3 start 225 is beyond EOD, truncated [ 450.916554][ T6116] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 450.936852][ T6123] loop5: detected capacity change from 0 to 6 [ 450.948604][ T6123] FAT-fs (loop5): bogus sectors per cluster 18 [ 450.954841][ T6123] FAT-fs (loop5): Can't find a valid FAT filesystem [ 451.030948][ T6168] FAULT_INJECTION: forcing a failure. [ 451.030948][ T6168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.044185][ T6168] CPU: 1 PID: 6168 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 451.054261][ T6168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.064314][ T6168] Call Trace: [ 451.067588][ T6168] dump_stack+0x137/0x19d [ 451.071923][ T6168] should_fail+0x23c/0x250 [ 451.076350][ T6168] should_fail_usercopy+0x16/0x20 [ 451.081377][ T6168] _copy_to_iter+0x17c/0xdd0 [ 451.085968][ T6168] ? finish_task_switch+0xce/0x290 [ 451.091087][ T6168] ? check_stack_object+0x61/0x70 [ 451.096194][ T6168] ? __virt_addr_valid+0x15a/0x1a0 [ 451.101327][ T6168] ? __check_object_size+0x253/0x310 [ 451.106638][ T6168] simple_copy_to_iter+0x4c/0x60 [ 451.111626][ T6168] __skb_datagram_iter+0x23c/0x520 [ 451.116795][ T6168] ? skb_copy_datagram_iter+0xc0/0xc0 [ 451.122209][ T6168] skb_copy_datagram_iter+0x39/0xc0 [ 451.127406][ T6168] unix_stream_read_actor+0x40/0x60 [ 451.132603][ T6168] unix_stream_read_generic+0x691/0x1260 [ 451.138338][ T6168] unix_stream_recvmsg+0x63/0x90 [ 451.143281][ T6168] ? init_peercred+0x180/0x180 [ 451.148064][ T6168] ? unix_stream_sendmsg+0xa90/0xa90 [ 451.153371][ T6168] ____sys_recvmsg+0x15d/0x310 [ 451.158156][ T6168] ? __import_iovec+0x1ff/0x270 [ 451.163072][ T6168] ? import_iovec+0x69/0x80 [ 451.167592][ T6168] do_recvmmsg+0x34c/0x9e0 [ 451.172041][ T6168] ? do_anonymous_page+0x411/0x8b0 [ 451.177256][ T6168] ? fsnotify_perm+0x59/0x2e0 [ 451.181983][ T6168] ? __fsnotify_parent+0x32f/0x430 [ 451.187188][ T6168] ? __fget_light+0x21b/0x260 [ 451.191869][ T6168] ? __cond_resched+0x11/0x40 [ 451.196595][ T6168] __x64_sys_recvmmsg+0xcf/0x150 [ 451.201535][ T6168] ? exit_to_user_mode_prepare+0x65/0x190 [ 451.207333][ T6168] do_syscall_64+0x4a/0x90 [ 451.211752][ T6168] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 451.218264][ T6168] RIP: 0033:0x4665d9 [ 451.222158][ T6168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 451.241858][ T6168] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 451.250276][ T6168] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 451.258301][ T6168] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 451.266269][ T6168] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 451.274237][ T6168] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 451.282206][ T6168] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 09:49:17 executing program 2 (fault-call:8 fault-nth:83): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:17 executing program 3: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0) 09:49:17 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000026a70000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400042201000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x60e}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x60f}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:17 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) getpeername(r0, 0x0, 0x0) 09:49:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x610}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 451.696597][ T6182] loop1: detected capacity change from 0 to 1 [ 451.716912][ T6181] loop5: detected capacity change from 0 to 6 09:49:17 executing program 3: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x1f765cb9fa1bfabe) 09:49:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001380), 0x0, 0x204000) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) [ 451.751020][ T6181] FAT-fs (loop5): bogus sectors per cluster 34 [ 451.756296][ T6182] loop1: p2 p3 p4 [ 451.757421][ T6181] FAT-fs (loop5): Can't find a valid FAT filesystem [ 451.763766][ T6182] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 451.780841][ T6182] loop1: p3 start 225 is beyond EOD, truncated [ 451.787063][ T6182] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 451.840081][ T6182] loop1: detected capacity change from 0 to 1 [ 451.844581][ T6181] loop5: detected capacity change from 0 to 6 [ 451.891806][ T1032] loop1: p2 p3 p4 [ 451.892699][ T6181] FAT-fs (loop5): bogus sectors per cluster 34 [ 451.895710][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 451.901737][ T6181] FAT-fs (loop5): Can't find a valid FAT filesystem [ 451.906892][ T6187] FAULT_INJECTION: forcing a failure. [ 451.906892][ T6187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.909828][ T1032] loop1: p3 start 225 is beyond EOD, [ 451.915459][ T6187] CPU: 0 PID: 6187 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 451.928480][ T1032] truncated [ 451.933825][ T6187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.933841][ T6187] Call Trace: [ 451.933849][ T6187] dump_stack+0x137/0x19d [ 451.943920][ T1032] loop1: p4 size 3657465856 extends beyond EOD, [ 451.947023][ T6187] should_fail+0x23c/0x250 [ 451.957075][ T1032] truncated [ 451.960332][ T6187] should_fail_usercopy+0x16/0x20 [ 451.983597][ T6187] _copy_to_iter+0x17c/0xdd0 [ 451.988220][ T6187] ? check_stack_object+0x61/0x70 [ 451.993270][ T6187] ? __virt_addr_valid+0x15a/0x1a0 [ 451.998374][ T6187] ? __check_object_size+0x253/0x310 [ 452.003641][ T6187] simple_copy_to_iter+0x4c/0x60 [ 452.008563][ T6187] ? skb_copy_datagram_iter+0xc0/0xc0 [ 452.013967][ T6187] __skb_datagram_iter+0xac/0x520 [ 452.021672][ T6187] ? ___cache_free+0x3c/0x300 [ 452.026339][ T6187] ? kfree+0xf0/0x1d0 [ 452.030408][ T6187] ? __kfree_skb+0xfe/0x150 [ 452.034957][ T6187] skb_copy_datagram_iter+0x39/0xc0 [ 452.040146][ T6187] unix_stream_read_actor+0x40/0x60 [ 452.045347][ T6187] unix_stream_read_generic+0x691/0x1260 [ 452.050963][ T6187] unix_stream_recvmsg+0x63/0x90 [ 452.055887][ T6187] ? init_peercred+0x180/0x180 [ 452.060704][ T6187] ? unix_stream_sendmsg+0xa90/0xa90 [ 452.066010][ T6187] ____sys_recvmsg+0x15d/0x310 [ 452.070775][ T6187] ? __import_iovec+0x1ff/0x270 [ 452.075612][ T6187] ? import_iovec+0x69/0x80 [ 452.080130][ T6187] do_recvmmsg+0x34c/0x9e0 [ 452.084595][ T6187] ? do_anonymous_page+0x411/0x8b0 [ 452.089692][ T6187] ? fsnotify_perm+0x59/0x2e0 [ 452.094349][ T6187] ? __fsnotify_parent+0x32f/0x430 [ 452.099446][ T6187] ? __fget_light+0x21b/0x260 [ 452.104106][ T6187] ? __cond_resched+0x11/0x40 [ 452.108764][ T6187] __x64_sys_recvmmsg+0xcf/0x150 [ 452.113880][ T6187] ? exit_to_user_mode_prepare+0x65/0x190 [ 452.119627][ T6187] do_syscall_64+0x4a/0x90 [ 452.124135][ T6187] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 452.130140][ T6187] RIP: 0033:0x4665d9 [ 452.134298][ T6187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 452.153949][ T6187] RSP: 002b:00007f269420c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 452.162366][ T6187] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 452.170347][ T6187] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 452.178380][ T6187] RBP: 00007f269420c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 452.186334][ T6187] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 452.194287][ T6187] R13: 00007fff05d995ff R14: 00007f269420c300 R15: 0000000000022000 [ 452.204077][ T6182] loop1: p2 p3 p4 [ 452.207858][ T6182] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 452.215439][ T6182] loop1: p3 start 225 is beyond EOD, truncated [ 452.221641][ T6182] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 452.292234][ T1032] loop1: p2 p3 p4 [ 452.296039][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 452.303589][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 452.309847][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:18 executing program 2 (fault-call:8 fault-nth:84): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x611}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:18 executing program 3: syz_btf_id_by_name$bpf_lsm(&(0x7f0000000000)='bpf_lsm_post_notification\x00') syz_btf_id_by_name$bpf_lsm(&(0x7f0000000040)='bpf_lsm_task_getpgid\x00') socketpair(0x1d, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x25c, r0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4000}, 0x40008004) 09:49:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400042501000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:18 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff0300a726000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x612}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 452.563267][ T6245] loop1: detected capacity change from 0 to 1 [ 452.601044][ T6245] loop1: p2 p3 p4 [ 452.604953][ T6245] loop1: p2 size 1073872896 extends beyond EOD, truncated 09:49:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 09:49:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x613}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 452.626639][ T6245] loop1: p3 start 225 is beyond EOD, truncated [ 452.627660][ T6255] loop5: detected capacity change from 0 to 6 [ 452.632941][ T6245] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 452.654570][ T6255] FAT-fs (loop5): bogus sectors per cluster 37 [ 452.660878][ T6255] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000780), r0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000800), r0) 09:49:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 452.714770][ T6255] loop5: detected capacity change from 0 to 6 [ 452.732246][ T6255] FAT-fs (loop5): bogus sectors per cluster 37 [ 452.738431][ T6255] FAT-fs (loop5): Can't find a valid FAT filesystem [ 452.819503][ T6260] FAULT_INJECTION: forcing a failure. [ 452.819503][ T6260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.832594][ T6260] CPU: 1 PID: 6260 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 452.842688][ T6260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.852827][ T6260] Call Trace: [ 452.856113][ T6260] dump_stack+0x137/0x19d [ 452.860577][ T6260] should_fail+0x23c/0x250 [ 452.864991][ T6260] should_fail_usercopy+0x16/0x20 [ 452.869999][ T6260] _copy_to_iter+0x17c/0xdd0 [ 452.874574][ T6260] ? check_stack_object+0x61/0x70 [ 452.879587][ T6260] ? __virt_addr_valid+0x15a/0x1a0 [ 452.884701][ T6260] ? __check_object_size+0x253/0x310 [ 452.890011][ T6260] simple_copy_to_iter+0x4c/0x60 [ 452.894944][ T6260] __skb_datagram_iter+0x23c/0x520 [ 452.900056][ T6260] ? skb_copy_datagram_iter+0xc0/0xc0 [ 452.905413][ T6260] skb_copy_datagram_iter+0x39/0xc0 [ 452.910611][ T6260] unix_stream_read_actor+0x40/0x60 [ 452.915827][ T6260] unix_stream_read_generic+0x691/0x1260 [ 452.921456][ T6260] ? init_wait_entry+0x30/0x30 [ 452.926291][ T6260] unix_stream_recvmsg+0x63/0x90 [ 452.931217][ T6260] ? init_peercred+0x180/0x180 [ 452.936002][ T6260] ? unix_stream_sendmsg+0xa90/0xa90 [ 452.941271][ T6260] ____sys_recvmsg+0x15d/0x310 [ 452.946018][ T6260] ? __import_iovec+0x1ff/0x270 [ 452.950852][ T6260] ? import_iovec+0x69/0x80 [ 452.955357][ T6260] do_recvmmsg+0x34c/0x9e0 [ 452.959777][ T6260] ? do_anonymous_page+0x411/0x8b0 [ 452.964961][ T6260] ? fsnotify_perm+0x59/0x2e0 [ 452.969617][ T6260] ? __fsnotify_parent+0x32f/0x430 [ 452.974747][ T6260] ? __fget_light+0x21b/0x260 [ 452.979443][ T6260] ? __cond_resched+0x11/0x40 [ 452.984103][ T6260] __x64_sys_recvmmsg+0xcf/0x150 [ 452.989059][ T6260] ? exit_to_user_mode_prepare+0x65/0x190 [ 452.994782][ T6260] do_syscall_64+0x4a/0x90 [ 452.999201][ T6260] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 453.005095][ T6260] RIP: 0033:0x4665d9 [ 453.008970][ T6260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 453.028630][ T6260] RSP: 002b:00007f269420c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 453.037024][ T6260] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 453.044979][ T6260] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 453.052951][ T6260] RBP: 00007f269420c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 453.061118][ T6260] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 453.069090][ T6260] R13: 00007fff05d995ff R14: 00007f269420c300 R15: 0000000000022000 09:49:19 executing program 2 (fault-call:8 fault-nth:85): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:19 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000280000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x618}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:19 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, 0x0, r0) 09:49:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400044801000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8cffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x619}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa002000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001a40)) 09:49:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x622}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 453.482255][ T6314] loop1: detected capacity change from 0 to 1 [ 453.493977][ T6316] loop5: detected capacity change from 0 to 6 [ 453.501310][ T6316] FAT-fs (loop5): bogus sectors per cluster 72 [ 453.507576][ T6316] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:19 executing program 3: socketpair(0x2b, 0x0, 0x0, &(0x7f0000000c80)) 09:49:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xccffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 453.546641][ T6314] loop1: p2 p3 p4 [ 453.551492][ T6314] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 453.553730][ T6316] loop5: detected capacity change from 0 to 6 [ 453.567758][ T6316] FAT-fs (loop5): bogus sectors per cluster 72 [ 453.573985][ T6316] FAT-fs (loop5): Can't find a valid FAT filesystem [ 453.591620][ T6314] loop1: p3 start 225 is beyond EOD, truncated [ 453.597817][ T6314] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 453.677208][ T6314] loop1: detected capacity change from 0 to 1 [ 453.712618][ T6364] FAULT_INJECTION: forcing a failure. [ 453.712618][ T6364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.724844][ T6314] loop1: p2 p3 p4 [ 453.725687][ T6364] CPU: 0 PID: 6364 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 453.729592][ T6314] loop1: p2 size 1073872896 extends beyond EOD, [ 453.739419][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.739432][ T6364] Call Trace: [ 453.739441][ T6364] dump_stack+0x137/0x19d [ 453.745857][ T6314] truncated [ 453.755886][ T6364] should_fail+0x23c/0x250 [ 453.770970][ T6364] should_fail_usercopy+0x16/0x20 [ 453.776148][ T6364] _copy_to_iter+0x17c/0xdd0 [ 453.780789][ T6364] ? finish_task_switch+0xce/0x290 [ 453.786017][ T6364] ? check_stack_object+0x61/0x70 [ 453.791041][ T6364] ? __virt_addr_valid+0x15a/0x1a0 [ 453.796154][ T6364] ? __check_object_size+0x253/0x310 [ 453.801514][ T6364] simple_copy_to_iter+0x4c/0x60 [ 453.806535][ T6364] ? skb_copy_datagram_iter+0xc0/0xc0 [ 453.811906][ T6364] __skb_datagram_iter+0xac/0x520 [ 453.817110][ T6364] ? ___cache_free+0x3c/0x300 [ 453.821867][ T6364] ? kfree+0xf0/0x1d0 [ 453.825865][ T6364] ? __kfree_skb+0xfe/0x150 [ 453.830424][ T6364] skb_copy_datagram_iter+0x39/0xc0 [ 453.835688][ T6364] unix_stream_read_actor+0x40/0x60 [ 453.840985][ T6364] unix_stream_read_generic+0x691/0x1260 [ 453.846626][ T6364] unix_stream_recvmsg+0x63/0x90 [ 453.851675][ T6364] ? init_peercred+0x180/0x180 [ 453.856440][ T6364] ? unix_stream_sendmsg+0xa90/0xa90 [ 453.861756][ T6364] ____sys_recvmsg+0x15d/0x310 [ 453.866558][ T6364] ? __import_iovec+0x1ff/0x270 [ 453.871421][ T6364] ? import_iovec+0x69/0x80 [ 453.875956][ T6364] do_recvmmsg+0x34c/0x9e0 [ 453.880449][ T6364] ? do_anonymous_page+0x411/0x8b0 [ 453.885580][ T6364] ? fsnotify_perm+0x59/0x2e0 [ 453.890269][ T6364] ? __fsnotify_parent+0x32f/0x430 [ 453.895405][ T6364] ? __fget_light+0x21b/0x260 [ 453.900227][ T6364] ? __cond_resched+0x11/0x40 [ 453.904916][ T6364] __x64_sys_recvmmsg+0xcf/0x150 [ 453.909853][ T6364] ? exit_to_user_mode_prepare+0x65/0x190 [ 453.915591][ T6364] do_syscall_64+0x4a/0x90 [ 453.920016][ T6364] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 453.925915][ T6364] RIP: 0033:0x4665d9 [ 453.929805][ T6364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 453.949501][ T6364] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 453.957923][ T6364] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 453.965962][ T6364] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 453.974065][ T6364] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 453.982037][ T6364] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 453.990009][ T6364] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 454.006841][ T6314] loop1: p3 start 225 is beyond EOD, truncated [ 454.013160][ T6314] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 454.071818][ T1032] loop1: p2 p3 p4 [ 454.075800][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 454.083851][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 454.090010][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:20 executing program 2 (fault-call:8 fault-nth:86): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x625}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400044c01000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe83a1b0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:20 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000ac0)={'vxcan0\x00'}) 09:49:20 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000380000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x648}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf6ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400046001000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x64c}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 454.361089][ T6383] loop5: detected capacity change from 0 to 6 [ 454.373169][ T6383] FAT-fs (loop5): bogus sectors per cluster 76 [ 454.375589][ T6387] loop1: detected capacity change from 0 to 1 [ 454.379376][ T6383] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x660}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 454.438683][ T6387] loop1: p2 p3 p4 [ 454.442910][ T6387] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 454.458985][ T6387] loop1: p3 start 225 is beyond EOD, truncated [ 454.465385][ T6387] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 454.491962][ T6409] loop5: detected capacity change from 0 to 6 [ 454.548986][ T6409] FAT-fs (loop5): bogus sectors per cluster 96 [ 454.555279][ T6409] FAT-fs (loop5): Can't find a valid FAT filesystem [ 454.569669][ T6387] loop1: detected capacity change from 0 to 1 [ 454.577503][ T6429] FAULT_INJECTION: forcing a failure. [ 454.577503][ T6429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.590606][ T6429] CPU: 0 PID: 6429 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 454.600703][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.610831][ T6429] Call Trace: [ 454.614252][ T6429] dump_stack+0x137/0x19d [ 454.618832][ T6429] should_fail+0x23c/0x250 [ 454.623255][ T6429] should_fail_usercopy+0x16/0x20 [ 454.628265][ T6429] _copy_to_iter+0x17c/0xdd0 [ 454.632862][ T6429] ? check_stack_object+0x61/0x70 [ 454.637893][ T6429] ? __virt_addr_valid+0x15a/0x1a0 [ 454.643007][ T6429] ? __check_object_size+0x253/0x310 [ 454.648483][ T6429] simple_copy_to_iter+0x4c/0x60 [ 454.653427][ T6429] __skb_datagram_iter+0x23c/0x520 [ 454.658543][ T6429] ? skb_copy_datagram_iter+0xc0/0xc0 [ 454.663941][ T6429] skb_copy_datagram_iter+0x39/0xc0 [ 454.669186][ T6429] unix_stream_read_actor+0x40/0x60 [ 454.674394][ T6429] unix_stream_read_generic+0x691/0x1260 [ 454.680037][ T6429] ? init_wait_entry+0x30/0x30 [ 454.684809][ T6429] unix_stream_recvmsg+0x63/0x90 [ 454.689770][ T6429] ? init_peercred+0x180/0x180 [ 454.694549][ T6429] ? unix_stream_sendmsg+0xa90/0xa90 [ 454.699860][ T6429] ____sys_recvmsg+0x15d/0x310 [ 454.704626][ T6429] ? __import_iovec+0x1ff/0x270 [ 454.709479][ T6429] ? import_iovec+0x69/0x80 [ 454.714060][ T6429] do_recvmmsg+0x34c/0x9e0 [ 454.718472][ T6429] ? do_anonymous_page+0x411/0x8b0 [ 454.723656][ T6429] ? fsnotify_perm+0x59/0x2e0 [ 454.728355][ T6429] ? __fsnotify_parent+0x32f/0x430 [ 454.733490][ T6429] ? __fget_light+0x21b/0x260 [ 454.738195][ T6429] ? __cond_resched+0x11/0x40 [ 454.742876][ T6429] __x64_sys_recvmmsg+0xcf/0x150 [ 454.747817][ T6429] ? exit_to_user_mode_prepare+0x65/0x190 [ 454.753570][ T6429] do_syscall_64+0x4a/0x90 [ 454.758008][ T6429] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 454.763962][ T6429] RIP: 0033:0x4665d9 [ 454.767859][ T6429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 454.787487][ T6429] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 454.795924][ T6429] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 454.803898][ T6429] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 454.811886][ T6429] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 454.819910][ T6429] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 454.827878][ T6429] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 454.841173][ T1032] loop1: p2 p3 p4 [ 454.845007][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 454.853130][ T6409] loop5: detected capacity change from 0 to 6 [ 454.855461][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 454.865434][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 454.866139][ T6409] FAT-fs (loop5): bogus sectors per cluster 96 [ 454.878907][ T6409] FAT-fs (loop5): Can't find a valid FAT filesystem [ 454.887821][ T6387] loop1: p2 p3 p4 [ 454.891676][ T6387] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 454.899163][ T6387] loop1: p3 start 225 is beyond EOD, truncated [ 454.905391][ T6387] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 454.942697][ T1032] loop1: p2 p3 p4 [ 454.946622][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 454.955579][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 454.961800][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:21 executing program 2 (fault-call:8 fault-nth:87): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x668}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xff07000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400046801000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:21 executing program 3: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x800, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x1) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x24}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x4000) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0xc000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000780), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000800), r2) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, r4, 0x1, 0x2, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x44048080) 09:49:21 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000480000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x66c}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400046c01000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 455.226462][ T6456] loop5: detected capacity change from 0 to 6 [ 455.236558][ T6456] FAT-fs (loop5): bogus sectors per cluster 104 [ 455.242853][ T6456] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x674}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 455.324459][ T6478] loop1: detected capacity change from 0 to 1 [ 455.345905][ T6482] loop5: detected capacity change from 0 to 6 09:49:21 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) signalfd4(r0, &(0x7f00000007c0), 0x8, 0x0) [ 455.376268][ T6478] loop1: p2 p3 p4 [ 455.380096][ T6482] FAT-fs (loop5): bogus sectors per cluster 108 [ 455.386386][ T6482] FAT-fs (loop5): Can't find a valid FAT filesystem [ 455.398904][ T6478] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 455.414817][ T6478] loop1: p3 start 225 is beyond EOD, truncated [ 455.421036][ T6478] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 455.423599][ T6500] FAULT_INJECTION: forcing a failure. [ 455.423599][ T6500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.441226][ T6500] CPU: 1 PID: 6500 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 455.451308][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.461385][ T6500] Call Trace: [ 455.464660][ T6500] dump_stack+0x137/0x19d [ 455.469011][ T6500] should_fail+0x23c/0x250 [ 455.473430][ T6500] should_fail_usercopy+0x16/0x20 [ 455.478456][ T6500] _copy_to_iter+0x17c/0xdd0 [ 455.483106][ T6500] ? finish_task_switch+0xce/0x290 [ 455.488264][ T6500] ? check_stack_object+0x61/0x70 [ 455.493288][ T6500] ? __virt_addr_valid+0x15a/0x1a0 [ 455.498413][ T6500] ? __check_object_size+0x253/0x310 [ 455.503708][ T6500] simple_copy_to_iter+0x4c/0x60 [ 455.508647][ T6500] ? skb_copy_datagram_iter+0xc0/0xc0 [ 455.514054][ T6500] __skb_datagram_iter+0xac/0x520 [ 455.519124][ T6500] ? ___cache_free+0x3c/0x300 [ 455.523828][ T6500] ? kfree+0xf0/0x1d0 [ 455.527815][ T6500] ? __kfree_skb+0xfe/0x150 [ 455.532318][ T6500] skb_copy_datagram_iter+0x39/0xc0 [ 455.537524][ T6500] unix_stream_read_actor+0x40/0x60 [ 455.542733][ T6500] unix_stream_read_generic+0x691/0x1260 [ 455.548381][ T6500] unix_stream_recvmsg+0x63/0x90 [ 455.553325][ T6500] ? init_peercred+0x180/0x180 [ 455.558094][ T6500] ? unix_stream_sendmsg+0xa90/0xa90 [ 455.563379][ T6500] ____sys_recvmsg+0x15d/0x310 [ 455.568299][ T6500] ? __import_iovec+0x1ff/0x270 [ 455.573254][ T6500] ? import_iovec+0x69/0x80 [ 455.577753][ T6500] do_recvmmsg+0x34c/0x9e0 [ 455.582264][ T6500] ? do_anonymous_page+0x411/0x8b0 [ 455.587410][ T6500] ? fsnotify_perm+0x59/0x2e0 [ 455.592109][ T6500] ? __fsnotify_parent+0x32f/0x430 [ 455.597228][ T6500] ? __fget_light+0x21b/0x260 [ 455.601910][ T6500] ? __cond_resched+0x11/0x40 [ 455.606609][ T6500] __x64_sys_recvmmsg+0xcf/0x150 [ 455.611604][ T6500] ? exit_to_user_mode_prepare+0x65/0x190 [ 455.617325][ T6500] do_syscall_64+0x4a/0x90 [ 455.621774][ T6500] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 455.627673][ T6500] RIP: 0033:0x4665d9 [ 455.631566][ T6500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 455.651176][ T6500] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 455.659640][ T6500] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 455.667616][ T6500] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 455.675586][ T6500] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 455.683568][ T6500] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 455.691679][ T6500] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 455.737839][ T6482] loop5: detected capacity change from 0 to 6 [ 455.744037][ T6478] loop1: detected capacity change from 0 to 1 [ 455.754726][ T6482] FAT-fs (loop5): bogus sectors per cluster 108 [ 455.761044][ T6482] FAT-fs (loop5): Can't find a valid FAT filesystem [ 455.780951][ T6478] loop1: p2 p3 p4 [ 455.784958][ T6478] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 455.802964][ T6478] loop1: p3 start 225 is beyond EOD, truncated [ 455.809208][ T6478] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 455.902752][ T1032] loop1: p2 p3 p4 [ 455.906677][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 455.914566][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 455.920768][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:22 executing program 2 (fault-call:8 fault-nth:88): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x678}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)={0xc0}, 0x14}}, 0x0) 09:49:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400047401000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:22 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000580000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:22 executing program 3: unshare(0x2050000) 09:49:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x67a}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 456.127024][ T6543] loop1: detected capacity change from 0 to 1 [ 456.127113][ T6544] loop5: detected capacity change from 0 to 6 [ 456.145945][ T6544] FAT-fs (loop5): bogus sectors per cluster 116 [ 456.152258][ T6544] FAT-fs (loop5): Can't find a valid FAT filesystem [ 456.181965][ T6543] loop1: p2 p3 p4 [ 456.185978][ T6543] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 456.207292][ T6544] loop5: detected capacity change from 0 to 6 [ 456.213921][ T6543] loop1: p3 start 225 is beyond EOD, truncated [ 456.220139][ T6543] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x700}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private1}}) 09:49:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400047a01000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 456.221973][ T6544] FAT-fs (loop5): bogus sectors per cluster 116 [ 456.233574][ T6544] FAT-fs (loop5): Can't find a valid FAT filesystem [ 456.261309][ T6562] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 456.269368][ T6562] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 456.310201][ T6572] FAULT_INJECTION: forcing a failure. [ 456.310201][ T6572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.321473][ T6562] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 456.323314][ T6572] CPU: 0 PID: 6572 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 456.331295][ T6562] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 456.341318][ T6572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.341330][ T6572] Call Trace: [ 456.341339][ T6572] dump_stack+0x137/0x19d [ 456.370010][ T6572] should_fail+0x23c/0x250 [ 456.374441][ T6572] should_fail_usercopy+0x16/0x20 [ 456.379480][ T6572] _copy_to_iter+0x17c/0xdd0 [ 456.384069][ T6572] ? check_stack_object+0x61/0x70 [ 456.389187][ T6572] ? __virt_addr_valid+0x15a/0x1a0 [ 456.394323][ T6572] ? __check_object_size+0x253/0x310 [ 456.399608][ T6572] simple_copy_to_iter+0x4c/0x60 [ 456.404655][ T6572] __skb_datagram_iter+0x23c/0x520 [ 456.409807][ T6572] ? skb_copy_datagram_iter+0xc0/0xc0 [ 456.415319][ T6572] skb_copy_datagram_iter+0x39/0xc0 [ 456.420602][ T6572] unix_stream_read_actor+0x40/0x60 [ 456.425880][ T6572] unix_stream_read_generic+0x691/0x1260 [ 456.431521][ T6572] unix_stream_recvmsg+0x63/0x90 [ 456.436518][ T6572] ? init_peercred+0x180/0x180 [ 456.441284][ T6572] ? unix_stream_sendmsg+0xa90/0xa90 [ 456.446110][ T6576] loop5: detected capacity change from 0 to 6 [ 456.446612][ T6572] ____sys_recvmsg+0x15d/0x310 [ 456.457426][ T6572] ? __import_iovec+0x1ff/0x270 [ 456.457596][ T6576] FAT-fs (loop5): bogus sectors per cluster 122 [ 456.462277][ T6572] ? import_iovec+0x69/0x80 [ 456.462299][ T6572] do_recvmmsg+0x34c/0x9e0 [ 456.468618][ T6576] FAT-fs (loop5): Can't find a valid FAT filesystem [ 456.484153][ T6572] ? do_anonymous_page+0x411/0x8b0 [ 456.489378][ T6572] ? fsnotify_perm+0x59/0x2e0 [ 456.494077][ T6572] ? __fsnotify_parent+0x32f/0x430 [ 456.499173][ T6572] ? __fget_light+0x21b/0x260 [ 456.503849][ T6572] ? __cond_resched+0x11/0x40 [ 456.508505][ T6572] __x64_sys_recvmmsg+0xcf/0x150 [ 456.513434][ T6572] ? exit_to_user_mode_prepare+0x65/0x190 [ 456.519226][ T6572] do_syscall_64+0x4a/0x90 [ 456.523625][ T6572] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 456.529518][ T6572] RIP: 0033:0x4665d9 [ 456.533465][ T6572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 456.553069][ T6572] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 456.561480][ T6572] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 456.569506][ T6572] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 456.577460][ T6572] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 456.585475][ T6572] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 456.593466][ T6572] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 456.615796][ T6562] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 456.623792][ T6562] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 456.635744][ T6562] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 456.643747][ T6562] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 456.663183][ T6576] loop5: detected capacity change from 0 to 6 [ 456.670582][ T6576] FAT-fs (loop5): bogus sectors per cluster 122 [ 456.676877][ T6576] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x900}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:23 executing program 2 (fault-call:8 fault-nth:89): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:23 executing program 3: syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x210581) 09:49:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740004ab01000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:23 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000680000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 456.977868][ T6603] loop1: detected capacity change from 0 to 1 [ 456.984039][ T6601] loop5: detected capacity change from 0 to 6 [ 456.996554][ T6600] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 456.996605][ T6601] FAT-fs (loop5): bogus sectors per cluster 171 [ 457.004586][ T6600] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 09:49:23 executing program 3: socket(0x23, 0x0, 0xde) 09:49:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0xf00}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 457.010808][ T6601] FAT-fs (loop5): Can't find a valid FAT filesystem [ 457.030711][ T6600] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 457.038746][ T6600] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 457.051518][ T6603] loop1: p2 p3 p4 [ 457.062565][ T6603] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 457.098520][ T6603] loop1: p3 start 225 is beyond EOD, truncated [ 457.104724][ T6603] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 457.108386][ T6601] loop5: detected capacity change from 0 to 6 [ 457.118679][ T6601] FAT-fs (loop5): bogus sectors per cluster 171 [ 457.123647][ T6617] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 457.124982][ T6601] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040003000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 457.132919][ T6617] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 09:49:23 executing program 3: socket(0x2b, 0x1, 0x4) [ 457.214697][ T6637] FAULT_INJECTION: forcing a failure. [ 457.214697][ T6637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.227808][ T6637] CPU: 0 PID: 6637 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 457.238039][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.248168][ T6637] Call Trace: [ 457.251452][ T6637] dump_stack+0x137/0x19d [ 457.255793][ T6637] should_fail+0x23c/0x250 [ 457.260295][ T6637] should_fail_usercopy+0x16/0x20 [ 457.265344][ T6637] _copy_to_iter+0x17c/0xdd0 [ 457.269945][ T6637] ? finish_task_switch+0xce/0x290 [ 457.275079][ T6637] ? check_stack_object+0x61/0x70 [ 457.280106][ T6637] ? __virt_addr_valid+0x15a/0x1a0 [ 457.285241][ T6637] ? __check_object_size+0x253/0x310 [ 457.290545][ T6637] simple_copy_to_iter+0x4c/0x60 [ 457.295484][ T6637] ? skb_copy_datagram_iter+0xc0/0xc0 [ 457.300858][ T6637] __skb_datagram_iter+0xac/0x520 [ 457.305925][ T6637] ? ___cache_free+0x3c/0x300 [ 457.310672][ T6637] ? kfree+0xf0/0x1d0 [ 457.314659][ T6637] ? __kfree_skb+0xfe/0x150 [ 457.319186][ T6637] skb_copy_datagram_iter+0x39/0xc0 [ 457.324563][ T6637] unix_stream_read_actor+0x40/0x60 [ 457.329782][ T6637] unix_stream_read_generic+0x691/0x1260 [ 457.335437][ T6637] unix_stream_recvmsg+0x63/0x90 [ 457.340380][ T6637] ? init_peercred+0x180/0x180 [ 457.345205][ T6637] ? unix_stream_sendmsg+0xa90/0xa90 [ 457.350494][ T6637] ____sys_recvmsg+0x15d/0x310 [ 457.355258][ T6637] ? __import_iovec+0x1ff/0x270 [ 457.360187][ T6637] ? import_iovec+0x69/0x80 [ 457.364687][ T6637] do_recvmmsg+0x34c/0x9e0 [ 457.369114][ T6637] ? do_anonymous_page+0x411/0x8b0 [ 457.374235][ T6637] ? fsnotify_perm+0x59/0x2e0 [ 457.378912][ T6637] ? __fsnotify_parent+0x32f/0x430 [ 457.384027][ T6637] ? __fget_light+0x21b/0x260 [ 457.388763][ T6637] ? __cond_resched+0x11/0x40 [ 457.393490][ T6637] __x64_sys_recvmmsg+0xcf/0x150 [ 457.398424][ T6637] ? exit_to_user_mode_prepare+0x65/0x190 [ 457.404146][ T6637] do_syscall_64+0x4a/0x90 [ 457.408574][ T6637] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 457.414527][ T6637] RIP: 0033:0x4665d9 [ 457.418418][ T6637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 457.438031][ T6637] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 457.446447][ T6637] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 457.454417][ T6637] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 457.462404][ T6637] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 457.470377][ T6637] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 457.478351][ T6637] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 457.486587][ T6633] loop5: detected capacity change from 0 to 6 [ 457.505536][ T6633] FAT-fs (loop5): bogus sectors per cluster 0 [ 457.511673][ T6633] FAT-fs (loop5): Can't find a valid FAT filesystem [ 457.512993][ T6644] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 457.526287][ T6644] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 457.548503][ T6644] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 457.556676][ T6644] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 457.574994][ T6633] loop5: detected capacity change from 0 to 6 [ 457.583287][ T6655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 457.583331][ T6633] FAT-fs (loop5): bogus sectors per cluster 0 [ 457.591329][ T6655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 457.597359][ T6633] FAT-fs (loop5): Can't find a valid FAT filesystem [ 457.617034][ T6655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 457.625081][ T6655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 09:49:24 executing program 2 (fault-call:8 fault-nth:90): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x1300}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:24 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000780000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:24 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, 0x0}) 09:49:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040006000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', 0x0}) 09:49:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 457.877722][ T6671] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 457.885794][ T6671] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 457.887199][ T6673] loop1: detected capacity change from 0 to 1 [ 457.903069][ T6672] loop5: detected capacity change from 0 to 6 [ 457.913039][ T6672] FAT-fs (loop5): bogus sectors per cluster 0 [ 457.919150][ T6672] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x8303}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 457.930051][ T6671] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 457.938099][ T6671] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 457.966353][ T6673] loop1: p2 p3 p4 [ 457.970522][ T6673] loop1: p2 size 1073872896 extends beyond EOD, truncated 09:49:24 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000880000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 457.981036][ T6673] loop1: p3 start 225 is beyond EOD, truncated [ 457.987246][ T6673] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 458.004734][ T6672] loop5: detected capacity change from 0 to 6 [ 458.018482][ T6672] FAT-fs (loop5): bogus sectors per cluster 0 [ 458.024676][ T6672] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 458.069350][ T6702] FAULT_INJECTION: forcing a failure. [ 458.069350][ T6702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.082440][ T6702] CPU: 0 PID: 6702 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 458.092600][ T6702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.102730][ T6702] Call Trace: [ 458.104430][ T6708] loop1: detected capacity change from 0 to 1 [ 458.106016][ T6702] dump_stack+0x137/0x19d [ 458.116422][ T6702] should_fail+0x23c/0x250 [ 458.120851][ T6702] should_fail_usercopy+0x16/0x20 [ 458.125895][ T6702] _copy_to_iter+0x17c/0xdd0 [ 458.130655][ T6702] ? finish_task_switch+0xce/0x290 [ 458.135829][ T6702] ? check_stack_object+0x61/0x70 [ 458.140879][ T6702] ? __virt_addr_valid+0x15a/0x1a0 [ 458.146075][ T6702] ? __check_object_size+0x253/0x310 [ 458.151363][ T6702] simple_copy_to_iter+0x4c/0x60 [ 458.156391][ T6702] __skb_datagram_iter+0x23c/0x520 [ 458.161505][ T6702] ? skb_copy_datagram_iter+0xc0/0xc0 [ 458.166988][ T6702] skb_copy_datagram_iter+0x39/0xc0 [ 458.172190][ T6702] unix_stream_read_actor+0x40/0x60 [ 458.177392][ T6702] unix_stream_read_generic+0x691/0x1260 [ 458.183023][ T6702] unix_stream_recvmsg+0x63/0x90 [ 458.187965][ T6702] ? init_peercred+0x180/0x180 [ 458.192986][ T6702] ? unix_stream_sendmsg+0xa90/0xa90 [ 458.198291][ T6702] ____sys_recvmsg+0x15d/0x310 [ 458.203082][ T6702] ? __import_iovec+0x1ff/0x270 [ 458.207932][ T6702] ? import_iovec+0x69/0x80 [ 458.212432][ T6702] do_recvmmsg+0x34c/0x9e0 [ 458.216856][ T6702] ? do_anonymous_page+0x411/0x8b0 [ 458.222095][ T6702] ? fsnotify_perm+0x59/0x2e0 [ 458.226768][ T6702] ? __fsnotify_parent+0x32f/0x430 [ 458.231991][ T6702] ? __fget_light+0x21b/0x260 [ 458.236671][ T6702] ? __cond_resched+0x11/0x40 [ 458.241442][ T6702] __x64_sys_recvmmsg+0xcf/0x150 [ 458.246423][ T6702] ? exit_to_user_mode_prepare+0x65/0x190 [ 458.252143][ T6702] do_syscall_64+0x4a/0x90 [ 458.256626][ T6702] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 458.262561][ T6702] RIP: 0033:0x4665d9 [ 458.266509][ T6702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 458.286293][ T6702] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 458.294706][ T6702] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 458.302677][ T6702] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 458.310651][ T6702] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 09:49:24 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)) [ 458.318624][ T6702] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 458.326598][ T6702] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 458.371429][ T6708] loop1: p2 p3 p4 [ 458.375279][ T6708] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 458.375562][ T6715] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 458.384704][ T6708] loop1: p3 start 225 is beyond EOD, truncated [ 458.390401][ T6715] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 458.396578][ T6708] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 458.436173][ T6715] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 458.444249][ T6715] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 458.462323][ T6715] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 458.470310][ T6715] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 458.483558][ T6715] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 458.491633][ T6715] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 458.504457][ T6708] loop1: detected capacity change from 0 to 1 [ 458.532026][ T6708] loop1: p2 p3 p4 [ 458.535982][ T6708] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 458.543585][ T6708] loop1: p3 start 225 is beyond EOD, truncated [ 458.549764][ T6708] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 458.631545][ T1032] loop1: p2 p3 p4 [ 458.635398][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 458.642910][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 458.649083][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:24 executing program 2 (fault-call:8 fault-nth:91): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x8403}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040007000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:24 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 09:49:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:24 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000980000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x8603}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 458.777685][ T6752] loop5: detected capacity change from 0 to 6 [ 458.785132][ T6752] FAT-fs (loop5): bogus sectors per cluster 0 [ 458.785452][ T6750] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 458.791248][ T6752] FAT-fs (loop5): Can't find a valid FAT filesystem [ 458.799665][ T6750] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 458.819104][ T6756] loop1: detected capacity change from 0 to 1 09:49:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x8703}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:25 executing program 3: syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x81) [ 458.827298][ T6750] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 458.835373][ T6750] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 458.856547][ T6752] loop5: detected capacity change from 0 to 6 [ 458.866168][ T6756] loop1: p2 p3 p4 09:49:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x8803}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000002600)={&(0x7f0000002500), 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) [ 458.871542][ T6756] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 458.882712][ T6752] FAT-fs (loop5): bogus sectors per cluster 0 [ 458.888895][ T6752] FAT-fs (loop5): Can't find a valid FAT filesystem [ 458.908024][ T6756] loop1: p3 start 225 is beyond EOD, truncated [ 458.914241][ T6756] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 458.955599][ T6779] FAULT_INJECTION: forcing a failure. [ 458.955599][ T6779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.968683][ T6779] CPU: 0 PID: 6779 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 458.978811][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.988898][ T6779] Call Trace: [ 458.992270][ T6779] dump_stack+0x137/0x19d [ 458.996606][ T6779] should_fail+0x23c/0x250 [ 459.001045][ T6779] should_fail_usercopy+0x16/0x20 [ 459.006069][ T6779] _copy_to_iter+0x17c/0xdd0 [ 459.010676][ T6779] ? check_stack_object+0x61/0x70 [ 459.015703][ T6779] ? __virt_addr_valid+0x15a/0x1a0 [ 459.020885][ T6779] ? __check_object_size+0x253/0x310 [ 459.026174][ T6779] simple_copy_to_iter+0x4c/0x60 [ 459.031129][ T6779] ? skb_copy_datagram_iter+0xc0/0xc0 [ 459.036523][ T6779] __skb_datagram_iter+0xac/0x520 [ 459.041561][ T6779] ? ___cache_free+0x3c/0x300 [ 459.046297][ T6779] ? kfree+0xf0/0x1d0 [ 459.050280][ T6779] ? __kfree_skb+0xfe/0x150 [ 459.054830][ T6779] skb_copy_datagram_iter+0x39/0xc0 [ 459.060029][ T6779] unix_stream_read_actor+0x40/0x60 [ 459.065224][ T6779] unix_stream_read_generic+0x691/0x1260 [ 459.070858][ T6779] unix_stream_recvmsg+0x63/0x90 [ 459.075906][ T6779] ? init_peercred+0x180/0x180 [ 459.080665][ T6779] ? unix_stream_sendmsg+0xa90/0xa90 [ 459.085954][ T6779] ____sys_recvmsg+0x15d/0x310 [ 459.090736][ T6779] ? __import_iovec+0x1ff/0x270 [ 459.095676][ T6779] ? import_iovec+0x69/0x80 [ 459.100176][ T6779] do_recvmmsg+0x34c/0x9e0 [ 459.104589][ T6779] ? do_anonymous_page+0x411/0x8b0 [ 459.109773][ T6779] ? fsnotify_perm+0x59/0x2e0 [ 459.114451][ T6779] ? __fsnotify_parent+0x32f/0x430 [ 459.119574][ T6779] ? __fget_light+0x21b/0x260 [ 459.124262][ T6779] ? __cond_resched+0x11/0x40 [ 459.128943][ T6779] __x64_sys_recvmmsg+0xcf/0x150 [ 459.133941][ T6779] ? exit_to_user_mode_prepare+0x65/0x190 [ 459.139766][ T6779] do_syscall_64+0x4a/0x90 [ 459.144186][ T6779] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 459.150150][ T6779] RIP: 0033:0x4665d9 [ 459.154040][ T6779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 459.173851][ T6779] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 459.182266][ T6779] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 459.190251][ T6779] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 459.198221][ T6779] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 09:49:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040014000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 459.206194][ T6779] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 459.214176][ T6779] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 459.282438][ T6788] loop5: detected capacity change from 0 to 6 [ 459.289741][ T6788] FAT-fs (loop5): bogus sectors per cluster 0 [ 459.295862][ T6788] FAT-fs (loop5): Can't find a valid FAT filesystem [ 459.345110][ T6788] loop5: detected capacity change from 0 to 6 [ 459.352155][ T6788] FAT-fs (loop5): bogus sectors per cluster 0 [ 459.358294][ T6788] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:25 executing program 2 (fault-call:8 fault-nth:92): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:25 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, 0x0) 09:49:25 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000a80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x8903}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740004003f000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:25 executing program 3: syz_io_uring_setup(0x5717, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), 0x0) 09:49:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000402b9000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x8a03}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 459.616316][ T6808] loop5: detected capacity change from 0 to 6 [ 459.628587][ T6808] FAT-fs (loop5): bogus sectors per cluster 0 [ 459.634789][ T6808] FAT-fs (loop5): Can't find a valid FAT filesystem [ 459.639010][ T6806] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 459.649499][ T6806] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 459.657370][ T6815] loop1: detected capacity change from 0 to 1 [ 459.688759][ T6806] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 459.696840][ T6806] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 459.710121][ T6824] loop5: detected capacity change from 0 to 6 [ 459.718569][ T6815] loop1: p2 p3 p4 [ 459.723047][ T6824] FAT-fs (loop5): bogus number of FAT sectors [ 459.729122][ T6824] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:25 executing program 3: r0 = fork() ptrace$setopts(0x4200, r0, 0x0, 0x48) 09:49:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x8b03}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 459.733964][ T6815] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 459.753998][ T6815] loop1: p3 start 225 is beyond EOD, truncated [ 459.760231][ T6815] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 459.800703][ T6832] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 459.808754][ T6832] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 459.826587][ T6824] loop5: detected capacity change from 0 to 6 09:49:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0xaf26}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 459.856207][ T6815] loop1: detected capacity change from 0 to 1 [ 459.864214][ T6848] FAULT_INJECTION: forcing a failure. [ 459.864214][ T6848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.877320][ T6848] CPU: 0 PID: 6848 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 459.887463][ T6848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.897517][ T6848] Call Trace: [ 459.900799][ T6848] dump_stack+0x137/0x19d [ 459.905161][ T6848] should_fail+0x23c/0x250 [ 459.909590][ T6848] should_fail_usercopy+0x16/0x20 [ 459.914652][ T6848] _copy_to_iter+0x17c/0xdd0 [ 459.919244][ T6848] ? check_stack_object+0x61/0x70 [ 459.924297][ T6848] ? __virt_addr_valid+0x15a/0x1a0 [ 459.929418][ T6848] ? __check_object_size+0x253/0x310 [ 459.934830][ T6848] simple_copy_to_iter+0x4c/0x60 [ 459.939790][ T6848] __skb_datagram_iter+0x23c/0x520 [ 459.944917][ T6848] ? skb_copy_datagram_iter+0xc0/0xc0 [ 459.950315][ T6848] skb_copy_datagram_iter+0x39/0xc0 [ 459.955514][ T6848] unix_stream_read_actor+0x40/0x60 [ 459.960789][ T6848] unix_stream_read_generic+0x691/0x1260 [ 459.966429][ T6848] ? init_wait_entry+0x30/0x30 [ 459.971193][ T6848] unix_stream_recvmsg+0x63/0x90 [ 459.976136][ T6848] ? init_peercred+0x180/0x180 [ 459.980902][ T6848] ? unix_stream_sendmsg+0xa90/0xa90 [ 459.986219][ T6848] ____sys_recvmsg+0x15d/0x310 [ 459.990988][ T6848] ? __import_iovec+0x1ff/0x270 [ 459.995944][ T6848] ? import_iovec+0x69/0x80 [ 460.000551][ T6848] do_recvmmsg+0x34c/0x9e0 [ 460.005013][ T6848] ? do_anonymous_page+0x411/0x8b0 [ 460.010128][ T6848] ? fsnotify_perm+0x59/0x2e0 [ 460.014853][ T6848] ? __fsnotify_parent+0x32f/0x430 [ 460.020056][ T6848] ? __fget_light+0x21b/0x260 [ 460.024789][ T6848] ? __cond_resched+0x11/0x40 [ 460.029467][ T6848] __x64_sys_recvmmsg+0xcf/0x150 [ 460.034403][ T6848] ? exit_to_user_mode_prepare+0x65/0x190 [ 460.040127][ T6848] do_syscall_64+0x4a/0x90 [ 460.044545][ T6848] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 460.050522][ T6848] RIP: 0033:0x4665d9 [ 460.054425][ T6848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 460.074127][ T6848] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 460.082545][ T6848] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 460.090519][ T6848] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 460.098524][ T6848] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 460.106493][ T6848] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 460.114469][ T6848] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 460.141109][ T6824] FAT-fs (loop5): bogus number of FAT sectors [ 460.147262][ T6824] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:26 executing program 2 (fault-call:8 fault-nth:93): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:26 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000b80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0xbf26}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:26 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) 09:49:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000400c6000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x2, &(0x7f00000000c0)=ANY=[]) [ 460.490948][ T6868] loop5: detected capacity change from 0 to 6 [ 460.497196][ T6869] loop1: detected capacity change from 0 to 1 [ 460.529812][ T6868] FAT-fs (loop5): bogus sectors per cluster 0 09:49:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x3, &(0x7f00000000c0)=ANY=[]) 09:49:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000740), 0x4) [ 460.536071][ T6868] FAT-fs (loop5): Can't find a valid FAT filesystem [ 460.547106][ T6876] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 460.555115][ T6876] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 460.576968][ T6876] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 09:49:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x4, &(0x7f00000000c0)=ANY=[]) [ 460.585032][ T6876] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 460.587310][ T6869] loop1: p2 p3 p4 [ 460.600253][ T6869] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 460.607983][ T6868] loop5: detected capacity change from 0 to 6 [ 460.616721][ T6869] loop1: p3 start 225 is beyond EOD, truncated [ 460.622947][ T6869] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 460.632366][ T6868] FAT-fs (loop5): bogus sectors per cluster 0 09:49:26 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000c80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:26 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x161282) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) [ 460.638465][ T6868] FAT-fs (loop5): Can't find a valid FAT filesystem [ 460.720083][ T6910] loop1: detected capacity change from 0 to 1 [ 460.744396][ T6912] FAULT_INJECTION: forcing a failure. [ 460.744396][ T6912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.757484][ T6912] CPU: 0 PID: 6912 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 460.767563][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.777725][ T6912] Call Trace: [ 460.781002][ T6912] dump_stack+0x137/0x19d [ 460.785341][ T6912] should_fail+0x23c/0x250 [ 460.789756][ T6912] should_fail_usercopy+0x16/0x20 [ 460.794829][ T6912] _copy_to_iter+0x17c/0xdd0 [ 460.799421][ T6912] ? check_stack_object+0x61/0x70 [ 460.804577][ T6912] ? __virt_addr_valid+0x15a/0x1a0 [ 460.809690][ T6912] ? __check_object_size+0x253/0x310 [ 460.815001][ T6912] simple_copy_to_iter+0x4c/0x60 [ 460.819944][ T6912] ? skb_copy_datagram_iter+0xc0/0xc0 [ 460.825844][ T6912] __skb_datagram_iter+0xac/0x520 [ 460.830928][ T6912] ? ___cache_free+0x3c/0x300 [ 460.835687][ T6912] ? kfree+0xf0/0x1d0 [ 460.839674][ T6912] ? __kfree_skb+0xfe/0x150 [ 460.844224][ T6912] skb_copy_datagram_iter+0x39/0xc0 [ 460.849426][ T6912] unix_stream_read_actor+0x40/0x60 [ 460.854625][ T6912] unix_stream_read_generic+0x691/0x1260 [ 460.860303][ T6912] unix_stream_recvmsg+0x63/0x90 [ 460.865254][ T6912] ? init_peercred+0x180/0x180 [ 460.870020][ T6912] ? unix_stream_sendmsg+0xa90/0xa90 [ 460.875309][ T6912] ____sys_recvmsg+0x15d/0x310 [ 460.880168][ T6912] ? __import_iovec+0x1ff/0x270 [ 460.885034][ T6912] ? import_iovec+0x69/0x80 [ 460.889543][ T6912] do_recvmmsg+0x34c/0x9e0 [ 460.893982][ T6912] ? __fsnotify_parent+0x32f/0x430 [ 460.899179][ T6912] ? __fget_light+0x21b/0x260 [ 460.903860][ T6912] ? __cond_resched+0x11/0x40 [ 460.908535][ T6912] __x64_sys_recvmmsg+0xcf/0x150 [ 460.913529][ T6912] ? exit_to_user_mode_prepare+0x65/0x190 [ 460.919251][ T6912] do_syscall_64+0x4a/0x90 [ 460.923784][ T6912] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 460.929690][ T6912] RIP: 0033:0x4665d9 [ 460.933579][ T6912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 460.953204][ T6912] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 460.961730][ T6912] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 460.969746][ T6912] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 460.977716][ T6912] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 460.985688][ T6912] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 460.993730][ T6912] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 461.002422][ T1032] loop1: p2 p3 p4 [ 461.006328][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 461.014572][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 461.020869][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 461.029938][ T6910] loop1: p2 p3 p4 [ 461.033873][ T6910] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 461.041848][ T6910] loop1: p3 start 225 is beyond EOD, truncated [ 461.048108][ T6910] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 461.086557][ T6910] loop1: detected capacity change from 0 to 1 [ 461.141072][ T6910] loop1: p2 p3 p4 [ 461.144874][ T6910] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 461.152621][ T6910] loop1: p3 start 225 is beyond EOD, truncated [ 461.158835][ T6910] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 461.211568][ T1032] loop1: p2 p3 p4 [ 461.215420][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 461.223421][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 461.229581][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:27 executing program 2 (fault-call:8 fault-nth:94): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x5, &(0x7f00000000c0)=ANY=[]) 09:49:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040002000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 09:49:27 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000d80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x6, &(0x7f00000000c0)=ANY=[]) [ 461.407889][ T6950] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 461.415941][ T6950] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 461.427137][ T6952] loop1: detected capacity change from 0 to 1 [ 461.433424][ T6955] loop5: detected capacity change from 0 to 6 [ 461.447709][ T6950] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 09:49:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) 09:49:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x7, &(0x7f00000000c0)=ANY=[]) [ 461.451262][ T6952] loop1: p2 p3 p4 [ 461.455741][ T6950] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 461.459667][ T6952] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 461.473233][ T6955] FAT-fs (loop5): bogus sectors per cluster 0 [ 461.478110][ T6952] loop1: p3 start 225 is beyond EOD, [ 461.483942][ T6955] FAT-fs (loop5): Can't find a valid FAT filesystem [ 461.483947][ T6952] truncated [ 461.499003][ T6952] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x8, &(0x7f00000000c0)=ANY=[]) [ 461.548760][ T6970] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 461.556935][ T6970] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 09:49:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={0x0}}, 0x0) [ 461.591268][ T6955] loop5: detected capacity change from 0 to 6 [ 461.591293][ T6952] loop1: detected capacity change from 0 to 1 [ 461.612862][ T6955] FAT-fs (loop5): bogus sectors per cluster 0 [ 461.618985][ T6955] FAT-fs (loop5): Can't find a valid FAT filesystem [ 461.630972][ T6952] loop1: p2 p3 p4 09:49:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 461.645540][ T6952] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 461.653244][ T6986] FAULT_INJECTION: forcing a failure. [ 461.653244][ T6986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.666329][ T6986] CPU: 0 PID: 6986 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 461.676404][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.686465][ T6986] Call Trace: [ 461.689743][ T6986] dump_stack+0x137/0x19d [ 461.694153][ T6986] should_fail+0x23c/0x250 [ 461.698570][ T6986] should_fail_usercopy+0x16/0x20 [ 461.703693][ T6986] _copy_to_iter+0x17c/0xdd0 [ 461.708311][ T6986] ? finish_task_switch+0xce/0x290 [ 461.713426][ T6986] ? check_stack_object+0x61/0x70 [ 461.718644][ T6986] ? __virt_addr_valid+0x15a/0x1a0 [ 461.723776][ T6986] ? __check_object_size+0x253/0x310 [ 461.729116][ T6986] simple_copy_to_iter+0x4c/0x60 [ 461.734150][ T6986] __skb_datagram_iter+0x23c/0x520 [ 461.739285][ T6986] ? skb_copy_datagram_iter+0xc0/0xc0 [ 461.744719][ T6986] skb_copy_datagram_iter+0x39/0xc0 [ 461.749932][ T6986] unix_stream_read_actor+0x40/0x60 [ 461.755134][ T6986] unix_stream_read_generic+0x691/0x1260 [ 461.760788][ T6986] unix_stream_recvmsg+0x63/0x90 [ 461.765733][ T6986] ? init_peercred+0x180/0x180 [ 461.770508][ T6986] ? unix_stream_sendmsg+0xa90/0xa90 [ 461.775910][ T6986] ____sys_recvmsg+0x15d/0x310 [ 461.780844][ T6986] ? __import_iovec+0x1ff/0x270 [ 461.785772][ T6986] ? import_iovec+0x69/0x80 [ 461.790277][ T6986] do_recvmmsg+0x34c/0x9e0 [ 461.794709][ T6986] ? do_anonymous_page+0x411/0x8b0 [ 461.799831][ T6986] ? fsnotify_perm+0x59/0x2e0 [ 461.804563][ T6986] ? __fsnotify_parent+0x32f/0x430 [ 461.809678][ T6986] ? __fget_light+0x21b/0x260 [ 461.814410][ T6986] ? __cond_resched+0x11/0x40 [ 461.819086][ T6986] __x64_sys_recvmmsg+0xcf/0x150 [ 461.824064][ T6986] ? exit_to_user_mode_prepare+0x65/0x190 [ 461.829802][ T6986] do_syscall_64+0x4a/0x90 [ 461.834239][ T6986] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 461.840139][ T6986] RIP: 0033:0x4665d9 [ 461.844032][ T6986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 461.863684][ T6986] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 461.872096][ T6986] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 461.880065][ T6986] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 461.888101][ T6986] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 461.896071][ T6986] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 461.904050][ T6986] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 461.940271][ T6952] loop1: p3 start 225 is beyond EOD, truncated [ 461.946520][ T6952] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 461.963762][ T6999] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 461.971780][ T6999] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 461.994454][ T6999] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 462.002529][ T6999] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 462.020304][ T7005] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 462.028318][ T7005] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 462.040260][ T7005] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 462.048417][ T7005] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 09:49:28 executing program 2 (fault-call:8 fault-nth:95): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x9, &(0x7f00000000c0)=ANY=[]) 09:49:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x420}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 09:49:28 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000e80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040003000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0xa, &(0x7f00000000c0)=ANY=[]) 09:49:28 executing program 3: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000cc0)) [ 462.268988][ T7019] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 462.277029][ T7019] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 462.288711][ T7021] loop5: detected capacity change from 0 to 6 [ 462.296738][ T7023] loop1: detected capacity change from 0 to 1 [ 462.307225][ T7021] FAT-fs (loop5): bogus sectors per cluster 0 09:49:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0xb, &(0x7f00000000c0)=ANY=[]) [ 462.313345][ T7021] FAT-fs (loop5): Can't find a valid FAT filesystem [ 462.323324][ T7019] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 462.331714][ T7019] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 462.344565][ T7023] loop1: p2 p3 p4 [ 462.348834][ T7023] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 462.360213][ T7021] loop5: detected capacity change from 0 to 6 09:49:28 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000001780)) clone3(&(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, {0x1d}, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x0}, 0x58) clone3(0x0, 0x0) [ 462.365717][ T7023] loop1: p3 start 225 is beyond EOD, truncated [ 462.372549][ T7023] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 462.385538][ T7021] FAT-fs (loop5): bogus sectors per cluster 0 [ 462.391652][ T7021] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040004000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 462.457489][ T7023] loop1: detected capacity change from 0 to 1 [ 462.458695][ T7058] FAULT_INJECTION: forcing a failure. [ 462.458695][ T7058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.476678][ T7058] CPU: 1 PID: 7058 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 462.486747][ T7058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.496828][ T7058] Call Trace: [ 462.500110][ T7058] dump_stack+0x137/0x19d [ 462.504446][ T7058] should_fail+0x23c/0x250 [ 462.508864][ T7058] should_fail_usercopy+0x16/0x20 [ 462.513944][ T7058] _copy_to_iter+0x17c/0xdd0 [ 462.518559][ T7058] ? finish_task_switch+0xce/0x290 [ 462.523681][ T7058] ? check_stack_object+0x61/0x70 [ 462.528717][ T7058] ? __virt_addr_valid+0x15a/0x1a0 [ 462.533847][ T7058] ? __check_object_size+0x253/0x310 [ 462.539156][ T7058] simple_copy_to_iter+0x4c/0x60 [ 462.544113][ T7058] ? skb_copy_datagram_iter+0xc0/0xc0 [ 462.549486][ T7058] __skb_datagram_iter+0xac/0x520 [ 462.554517][ T7058] ? ___cache_free+0x3c/0x300 [ 462.559203][ T7058] ? kfree+0xf0/0x1d0 [ 462.563185][ T7058] ? __kfree_skb+0xfe/0x150 [ 462.567765][ T7058] skb_copy_datagram_iter+0x39/0xc0 [ 462.572999][ T7058] unix_stream_read_actor+0x40/0x60 [ 462.578215][ T7058] unix_stream_read_generic+0x691/0x1260 [ 462.583847][ T7058] unix_stream_recvmsg+0x63/0x90 [ 462.588788][ T7058] ? init_peercred+0x180/0x180 [ 462.593550][ T7058] ? unix_stream_sendmsg+0xa90/0xa90 [ 462.598856][ T7058] ____sys_recvmsg+0x15d/0x310 [ 462.603616][ T7058] ? __import_iovec+0x1ff/0x270 [ 462.608501][ T7058] ? import_iovec+0x69/0x80 [ 462.613001][ T7058] do_recvmmsg+0x34c/0x9e0 [ 462.617416][ T7058] ? do_anonymous_page+0x411/0x8b0 [ 462.622529][ T7058] ? fsnotify_perm+0x59/0x2e0 [ 462.627223][ T7058] ? __fsnotify_parent+0x32f/0x430 [ 462.632340][ T7058] ? __fget_light+0x21b/0x260 [ 462.637022][ T7058] ? __cond_resched+0x11/0x40 [ 462.641698][ T7058] __x64_sys_recvmmsg+0xcf/0x150 [ 462.646634][ T7058] ? exit_to_user_mode_prepare+0x65/0x190 [ 462.652420][ T7058] do_syscall_64+0x4a/0x90 [ 462.656953][ T7058] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 462.662887][ T7058] RIP: 0033:0x4665d9 [ 462.666781][ T7058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 462.686501][ T7058] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 462.694915][ T7058] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 09:49:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0xc, &(0x7f00000000c0)=ANY=[]) [ 462.702972][ T7058] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 462.710946][ T7058] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 462.718933][ T7058] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 462.726903][ T7058] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 462.758679][ T7023] loop1: p2 p3 p4 [ 462.770062][ T7023] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 462.780778][ T7063] loop5: detected capacity change from 0 to 6 [ 462.784225][ T7023] loop1: p3 start 225 is beyond EOD, truncated [ 462.788781][ T7063] FAT-fs (loop5): bogus sectors per cluster 0 [ 462.793110][ T7023] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 462.799136][ T7063] FAT-fs (loop5): Can't find a valid FAT filesystem [ 462.845777][ T7063] loop5: detected capacity change from 0 to 6 [ 462.852639][ T7063] FAT-fs (loop5): bogus sectors per cluster 0 [ 462.858884][ T7063] FAT-fs (loop5): Can't find a valid FAT filesystem [ 462.891464][ T1032] loop1: p2 p3 p4 [ 462.895233][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 462.902896][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 462.909080][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:29 executing program 2 (fault-call:8 fault-nth:96): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0xd, &(0x7f00000000c0)=ANY=[]) 09:49:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 09:49:29 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000f80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040006000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0xe, &(0x7f00000000c0)=ANY=[]) 09:49:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8983, &(0x7f0000000000)={'team_slave_0\x00'}) [ 463.152695][ T7096] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 463.160745][ T7096] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 463.171425][ T7095] loop1: detected capacity change from 0 to 1 [ 463.178837][ T7097] loop5: detected capacity change from 0 to 6 [ 463.186899][ T7097] FAT-fs (loop5): bogus sectors per cluster 0 [ 463.193074][ T7097] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0xf, &(0x7f00000000c0)=ANY=[]) 09:49:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a1, 0x0) [ 463.200663][ T7096] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 463.208701][ T7096] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 463.216340][ T7095] loop1: p2 p3 p4 [ 463.247229][ T7095] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 463.256589][ T7095] loop1: p3 start 225 is beyond EOD, truncated [ 463.262850][ T7095] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040007000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x10, &(0x7f00000000c0)=ANY=[]) [ 463.287672][ T7117] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 463.295727][ T7117] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 463.322939][ T7095] loop1: detected capacity change from 0 to 1 [ 463.354237][ T7133] loop5: detected capacity change from 0 to 6 [ 463.356446][ T7135] FAULT_INJECTION: forcing a failure. [ 463.356446][ T7135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.373519][ T7135] CPU: 0 PID: 7135 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 463.383598][ T7135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.393686][ T7135] Call Trace: [ 463.396962][ T7135] dump_stack+0x137/0x19d [ 463.401313][ T7135] should_fail+0x23c/0x250 [ 463.405731][ T7135] should_fail_usercopy+0x16/0x20 [ 463.410787][ T7135] _copy_to_iter+0x17c/0xdd0 [ 463.415379][ T7135] ? finish_task_switch+0xce/0x290 [ 463.420496][ T7135] ? check_stack_object+0x61/0x70 [ 463.425656][ T7135] ? __virt_addr_valid+0x15a/0x1a0 [ 463.430808][ T7135] ? __check_object_size+0x253/0x310 [ 463.436161][ T7135] simple_copy_to_iter+0x4c/0x60 [ 463.441281][ T7135] __skb_datagram_iter+0x23c/0x520 [ 463.446397][ T7135] ? skb_copy_datagram_iter+0xc0/0xc0 [ 463.452065][ T7135] skb_copy_datagram_iter+0x39/0xc0 [ 463.457281][ T7135] unix_stream_read_actor+0x40/0x60 [ 463.463162][ T7135] unix_stream_read_generic+0x691/0x1260 [ 463.468814][ T7135] unix_stream_recvmsg+0x63/0x90 [ 463.473787][ T7135] ? init_peercred+0x180/0x180 [ 463.478605][ T7135] ? unix_stream_sendmsg+0xa90/0xa90 [ 463.483988][ T7135] ____sys_recvmsg+0x15d/0x310 [ 463.488869][ T7135] ? __import_iovec+0x1ff/0x270 [ 463.493743][ T7135] ? import_iovec+0x69/0x80 [ 463.498252][ T7135] do_recvmmsg+0x34c/0x9e0 [ 463.502668][ T7135] ? do_anonymous_page+0x411/0x8b0 [ 463.507865][ T7135] ? fsnotify_perm+0x59/0x2e0 [ 463.512622][ T7135] ? __fsnotify_parent+0x32f/0x430 [ 463.517760][ T7135] ? __fget_light+0x21b/0x260 [ 463.522441][ T7135] ? __cond_resched+0x11/0x40 [ 463.527116][ T7135] __x64_sys_recvmmsg+0xcf/0x150 [ 463.532051][ T7135] ? exit_to_user_mode_prepare+0x65/0x190 [ 463.537851][ T7135] do_syscall_64+0x4a/0x90 [ 463.542268][ T7135] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 463.548224][ T7135] RIP: 0033:0x4665d9 [ 463.552131][ T7135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 463.571771][ T7135] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 463.580202][ T7135] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 463.588171][ T7135] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 463.596139][ T7135] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 463.604110][ T7135] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 463.612080][ T7135] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 463.628615][ T7133] FAT-fs (loop5): bogus sectors per cluster 0 [ 463.634753][ T7133] FAT-fs (loop5): Can't find a valid FAT filesystem [ 463.657763][ T7095] loop1: p2 p3 p4 [ 463.661792][ T7095] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 463.672678][ T7095] loop1: p3 start 225 is beyond EOD, truncated [ 463.678921][ T7095] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 463.695139][ T7133] loop5: detected capacity change from 0 to 6 [ 463.702168][ T7133] FAT-fs (loop5): bogus sectors per cluster 0 [ 463.708260][ T7133] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:30 executing program 2 (fault-call:8 fault-nth:97): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:30 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000005440)=[{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002780)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000002840)=[@rights={{0x10}}], 0x10}], 0x1, 0x0) 09:49:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x11, &(0x7f00000000c0)=ANY=[]) 09:49:30 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03001080000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040008000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x12, &(0x7f00000000c0)=ANY=[]) [ 464.030026][ T7169] loop5: detected capacity change from 0 to 6 [ 464.048641][ T7173] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 464.056774][ T7173] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 464.065514][ T7175] loop1: detected capacity change from 0 to 1 [ 464.074137][ T7169] FAT-fs (loop5): bogus sectors per cluster 0 09:49:30 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r0, 0x203}, 0x14}}, 0x0) 09:49:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x13, &(0x7f00000000c0)=ANY=[]) [ 464.080242][ T7169] FAT-fs (loop5): Can't find a valid FAT filesystem [ 464.088148][ T7173] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 464.096208][ T7173] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 464.121057][ T7175] loop1: p2 p3 p4 [ 464.125650][ T7175] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 464.137732][ T7175] loop1: p3 start 225 is beyond EOD, truncated [ 464.144023][ T7175] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 464.155265][ T7169] loop5: detected capacity change from 0 to 6 [ 464.165967][ T7185] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 09:49:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x18, &(0x7f00000000c0)=ANY=[]) [ 464.174051][ T7185] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007d216351 [ 464.193811][ T7175] loop1: detected capacity change from 0 to 1 [ 464.202269][ T7169] FAT-fs (loop5): bogus sectors per cluster 0 [ 464.208349][ T7169] FAT-fs (loop5): Can't find a valid FAT filesystem [ 464.222248][ T7203] FAULT_INJECTION: forcing a failure. [ 464.222248][ T7203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.235442][ T7203] CPU: 1 PID: 7203 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 464.245547][ T7203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.255621][ T7203] Call Trace: [ 464.258913][ T7203] dump_stack+0x137/0x19d [ 464.263250][ T7203] should_fail+0x23c/0x250 [ 464.267695][ T7203] should_fail_usercopy+0x16/0x20 [ 464.272720][ T7203] _copy_to_iter+0x17c/0xdd0 [ 464.277314][ T7203] ? finish_task_switch+0xce/0x290 [ 464.282495][ T7203] ? check_stack_object+0x61/0x70 [ 464.287541][ T7203] ? __virt_addr_valid+0x15a/0x1a0 [ 464.292652][ T7203] ? __check_object_size+0x253/0x310 [ 464.297940][ T7203] simple_copy_to_iter+0x4c/0x60 [ 464.302935][ T7203] ? skb_copy_datagram_iter+0xc0/0xc0 [ 464.308308][ T7203] __skb_datagram_iter+0xac/0x520 [ 464.313409][ T7203] ? ___cache_free+0x3c/0x300 [ 464.318091][ T7203] ? kfree+0xf0/0x1d0 [ 464.322075][ T7203] ? __kfree_skb+0xfe/0x150 [ 464.326594][ T7203] skb_copy_datagram_iter+0x39/0xc0 [ 464.331817][ T7203] unix_stream_read_actor+0x40/0x60 [ 464.337021][ T7203] unix_stream_read_generic+0x691/0x1260 [ 464.342661][ T7203] unix_stream_recvmsg+0x63/0x90 [ 464.347682][ T7203] ? init_peercred+0x180/0x180 [ 464.352442][ T7203] ? unix_stream_sendmsg+0xa90/0xa90 [ 464.357788][ T7203] ____sys_recvmsg+0x15d/0x310 [ 464.362626][ T7203] ? __import_iovec+0x1ff/0x270 [ 464.367476][ T7203] ? import_iovec+0x69/0x80 [ 464.371979][ T7203] do_recvmmsg+0x34c/0x9e0 [ 464.376406][ T7203] ? do_anonymous_page+0x411/0x8b0 [ 464.381587][ T7203] ? fsnotify_perm+0x59/0x2e0 [ 464.386324][ T7203] ? __fsnotify_parent+0x32f/0x430 [ 464.391453][ T7203] ? __fget_light+0x21b/0x260 [ 464.396236][ T7203] ? __cond_resched+0x11/0x40 [ 464.400921][ T7203] __x64_sys_recvmmsg+0xcf/0x150 [ 464.405876][ T7203] ? exit_to_user_mode_prepare+0x65/0x190 [ 464.411691][ T7203] do_syscall_64+0x4a/0x90 [ 464.416113][ T7203] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 464.422064][ T7203] RIP: 0033:0x4665d9 [ 464.425958][ T7203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 464.445601][ T7203] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 464.454023][ T7203] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 464.462072][ T7203] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 464.470048][ T7203] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 09:49:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 09:49:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 464.478082][ T7203] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 464.486074][ T7203] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 464.506671][ T7175] loop1: p2 p3 p4 [ 464.510516][ T7175] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 464.521687][ T7175] loop1: p3 start 225 is beyond EOD, truncated [ 464.527951][ T7175] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:31 executing program 2 (fault-call:8 fault-nth:98): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x19, &(0x7f00000000c0)=ANY=[]) 09:49:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040014000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:31 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03001180000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x28}}, 0x0) 09:49:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x22, &(0x7f00000000c0)=ANY=[]) 09:49:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x803e0000}], 0x1, 0x0) 09:49:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x25, &(0x7f00000000c0)=ANY=[]) [ 464.905654][ T7237] loop1: detected capacity change from 0 to 1 [ 464.911846][ T7236] loop5: detected capacity change from 0 to 6 [ 464.937380][ T7236] FAT-fs (loop5): bogus sectors per cluster 0 [ 464.943592][ T7236] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 464.970997][ T7237] loop1: p2 p3 p4 [ 464.977200][ T7237] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 465.004073][ T7237] loop1: p3 start 225 is beyond EOD, truncated [ 465.010354][ T7237] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x48, &(0x7f00000000c0)=ANY=[]) [ 465.019846][ T7236] loop5: detected capacity change from 0 to 6 [ 465.027541][ T7236] FAT-fs (loop5): bogus sectors per cluster 0 [ 465.033666][ T7236] FAT-fs (loop5): Can't find a valid FAT filesystem [ 465.114256][ T7277] FAULT_INJECTION: forcing a failure. [ 465.114256][ T7277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.127584][ T7277] CPU: 1 PID: 7277 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 465.137698][ T7277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 465.147840][ T7277] Call Trace: [ 465.151147][ T7277] dump_stack+0x137/0x19d [ 465.155482][ T7277] should_fail+0x23c/0x250 [ 465.159899][ T7277] should_fail_usercopy+0x16/0x20 [ 465.164923][ T7277] _copy_to_iter+0x17c/0xdd0 [ 465.169529][ T7277] ? finish_task_switch+0xce/0x290 [ 465.174664][ T7277] ? check_stack_object+0x61/0x70 [ 465.179773][ T7277] ? __virt_addr_valid+0x15a/0x1a0 [ 465.184908][ T7277] ? __check_object_size+0x253/0x310 [ 465.190199][ T7277] simple_copy_to_iter+0x4c/0x60 [ 465.195265][ T7277] __skb_datagram_iter+0x23c/0x520 [ 465.200563][ T7277] ? skb_copy_datagram_iter+0xc0/0xc0 [ 465.206009][ T7277] skb_copy_datagram_iter+0x39/0xc0 [ 465.211305][ T7277] unix_stream_read_actor+0x40/0x60 [ 465.216520][ T7277] unix_stream_read_generic+0x691/0x1260 [ 465.222300][ T7277] ? kvm_sched_clock_read+0xd/0x20 [ 465.227509][ T7277] unix_stream_recvmsg+0x63/0x90 [ 465.232534][ T7277] ? init_peercred+0x180/0x180 [ 465.237436][ T7277] ? unix_stream_sendmsg+0xa90/0xa90 [ 465.242800][ T7277] ____sys_recvmsg+0x15d/0x310 [ 465.247580][ T7277] ? __import_iovec+0x1ff/0x270 [ 465.252523][ T7277] ? import_iovec+0x69/0x80 [ 465.257209][ T7277] do_recvmmsg+0x34c/0x9e0 [ 465.261670][ T7277] ? try_to_wake_up+0x38f/0x480 [ 465.266649][ T7277] ? fsnotify_perm+0x59/0x2e0 [ 465.271450][ T7277] ? __fsnotify_parent+0x32f/0x430 [ 465.276578][ T7277] ? copy_fpregs_to_fpstate+0xd8/0x110 [ 465.282084][ T7277] ? __fget_light+0x21b/0x260 [ 465.286781][ T7277] ? __cond_resched+0x11/0x40 [ 465.291463][ T7277] __x64_sys_recvmmsg+0xcf/0x150 [ 465.296405][ T7277] ? exit_to_user_mode_prepare+0x65/0x190 [ 465.302250][ T7277] do_syscall_64+0x4a/0x90 [ 465.306672][ T7277] ? irqentry_exit_to_user_mode+0x5/0x20 [ 465.312357][ T7277] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 465.318301][ T7277] RIP: 0033:0x4665d9 [ 465.322204][ T7277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 465.341933][ T7277] RSP: 002b:00007f26941a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 465.350354][ T7277] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 465.358324][ T7277] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 465.367124][ T7277] RBP: 00007f26941a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 465.375120][ T7277] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000002 [ 465.383108][ T7277] R13: 00007fff05d995ff R14: 00007f26941a9300 R15: 0000000000022000 [ 465.404812][ T7237] loop1: detected capacity change from 0 to 1 [ 465.441079][ T7237] loop1: p2 p3 p4 [ 465.445005][ T7237] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 465.453194][ T7237] loop1: p3 start 225 is beyond EOD, truncated [ 465.459536][ T7237] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 465.511927][ T1032] loop1: p2 p3 p4 [ 465.515815][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 465.523388][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 465.529563][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:31 executing program 2 (fault-call:8 fault-nth:99): perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x4c, &(0x7f00000000c0)=ANY=[]) 09:49:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000c40), 0xffffffffffffffff) 09:49:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000400c6000240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:31 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03001280000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x60, &(0x7f00000000c0)=ANY=[]) 09:49:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 465.770291][ T7307] loop5: detected capacity change from 0 to 6 [ 465.778390][ T7307] FAT-fs (loop5): bogus sectors per cluster 0 [ 465.784508][ T7307] FAT-fs (loop5): Can't find a valid FAT filesystem [ 465.791503][ T7308] loop1: detected capacity change from 0 to 1 09:49:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x2c}}, 0x0) 09:49:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x68, &(0x7f00000000c0)=ANY=[]) 09:49:32 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8903, 0x0) 09:49:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 465.828348][ T7308] loop1: p2 p3 p4 [ 465.835815][ T7307] loop5: detected capacity change from 0 to 6 [ 465.839406][ T7308] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 465.849775][ T7307] FAT-fs (loop5): bogus sectors per cluster 0 [ 465.855980][ T7307] FAT-fs (loop5): Can't find a valid FAT filesystem [ 465.863076][ T7308] loop1: p3 start 225 is beyond EOD, truncated [ 465.869246][ T7308] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 465.950749][ T7308] loop1: detected capacity change from 0 to 1 [ 465.985357][ T7308] loop1: p2 p3 p4 [ 465.989252][ T7308] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 466.000321][ T7316] FAULT_INJECTION: forcing a failure. [ 466.000321][ T7316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.006546][ T7308] loop1: p3 start 225 is beyond EOD, truncated [ 466.013665][ T7316] CPU: 1 PID: 7316 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 466.019825][ T7308] loop1: p4 size 3657465856 extends beyond EOD, [ 466.030002][ T7316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.030016][ T7316] Call Trace: [ 466.030024][ T7316] dump_stack+0x137/0x19d [ 466.030049][ T7316] should_fail+0x23c/0x250 [ 466.036384][ T7308] truncated [ 466.046408][ T7316] should_fail_usercopy+0x16/0x20 [ 466.046433][ T7316] _copy_to_iter+0x17c/0xdd0 [ 466.071197][ T7316] ? __perf_event_task_sched_in+0x471/0x4c0 [ 466.077273][ T7316] ? check_stack_object+0x61/0x70 [ 466.082447][ T7316] ? __virt_addr_valid+0x15a/0x1a0 [ 466.087585][ T7316] ? __check_object_size+0x253/0x310 [ 466.092941][ T7316] simple_copy_to_iter+0x4c/0x60 [ 466.098083][ T7316] ? skb_copy_datagram_iter+0xc0/0xc0 [ 466.103514][ T7316] __skb_datagram_iter+0xac/0x520 [ 466.108590][ T7316] ? __schedule+0x427/0x5b0 [ 466.113110][ T7316] skb_copy_datagram_iter+0x39/0xc0 [ 466.118311][ T7316] unix_stream_read_actor+0x40/0x60 [ 466.123512][ T7316] unix_stream_read_generic+0x691/0x1260 [ 466.130945][ T7316] ? init_wait_entry+0x30/0x30 [ 466.136001][ T7316] unix_stream_recvmsg+0x63/0x90 [ 466.141010][ T7316] ? init_peercred+0x180/0x180 [ 466.145855][ T7316] ? unix_stream_sendmsg+0xa90/0xa90 [ 466.151405][ T7316] ____sys_recvmsg+0x15d/0x310 [ 466.156174][ T7316] ? __import_iovec+0x1ff/0x270 [ 466.161103][ T7316] ? import_iovec+0x69/0x80 [ 466.165604][ T7316] do_recvmmsg+0x34c/0x9e0 [ 466.170300][ T7316] ? do_anonymous_page+0x411/0x8b0 [ 466.175418][ T7316] ? fsnotify_perm+0x59/0x2e0 [ 466.180098][ T7316] ? __fsnotify_parent+0x32f/0x430 [ 466.185223][ T7316] ? __fget_light+0x21b/0x260 [ 466.189977][ T7316] ? __cond_resched+0x11/0x40 [ 466.194656][ T7316] __x64_sys_recvmmsg+0xcf/0x150 [ 466.199629][ T7316] ? exit_to_user_mode_prepare+0x65/0x190 [ 466.205806][ T7316] do_syscall_64+0x4a/0x90 [ 466.210315][ T7316] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 466.216330][ T7316] RIP: 0033:0x4665d9 [ 466.220223][ T7316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 466.240095][ T7316] RSP: 002b:00007f269420c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 466.248523][ T7316] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 466.257024][ T7316] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000008 [ 466.265157][ T7316] RBP: 00007f269420c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 466.274235][ T7316] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000003 [ 466.282293][ T7316] R13: 00007fff05d995ff R14: 00007f269420c300 R15: 0000000000022000 09:49:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x6c, &(0x7f00000000c0)=ANY=[]) 09:49:32 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x891d, &(0x7f0000000000)={'team_slave_0\x00'}) 09:49:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000400b9020240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:32 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03001380000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x74, &(0x7f00000000c0)=ANY=[]) 09:49:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:32 executing program 3: socket(0x1e, 0x4, 0x0) [ 466.643332][ T7372] loop1: detected capacity change from 0 to 1 [ 466.649727][ T7374] loop5: detected capacity change from 0 to 6 [ 466.658972][ T7374] FAT-fs (loop5): bogus sectors per cluster 0 [ 466.665093][ T7374] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x78, &(0x7f00000000c0)=ANY=[]) 09:49:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040000030240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 466.704084][ T7372] loop1: p2 p3 p4 [ 466.713078][ T7372] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 466.736150][ T7372] loop1: p3 start 225 is beyond EOD, truncated [ 466.742493][ T7372] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x7a, &(0x7f00000000c0)=ANY=[]) [ 466.762196][ T7407] loop5: detected capacity change from 0 to 6 [ 466.770257][ T7407] FAT-fs (loop5): bogus sectors per cluster 0 [ 466.776444][ T7407] FAT-fs (loop5): Can't find a valid FAT filesystem [ 466.815463][ T7407] loop5: detected capacity change from 0 to 6 [ 466.822985][ T7407] FAT-fs (loop5): bogus sectors per cluster 0 [ 466.829159][ T7407] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:33 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03002480000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8930, &(0x7f0000000000)={'team_slave_0\x00'}) 09:49:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x10e, &(0x7f00000000c0)=ANY=[]) 09:49:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040000110240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x1d6, &(0x7f00000000c0)=ANY=[]) 09:49:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8953, 0x0) 09:49:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x1d7, &(0x7f00000000c0)=ANY=[]) 09:49:33 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) [ 467.564758][ T7435] loop1: detected capacity change from 0 to 1 09:49:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x1db, &(0x7f00000000c0)=ANY=[]) [ 467.623656][ T7435] loop1: p2 p3 p4 [ 467.627681][ T7445] loop5: detected capacity change from 0 to 6 [ 467.637831][ T7435] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 467.646385][ T7445] FAT-fs (loop5): bogus sectors per cluster 0 [ 467.652525][ T7445] FAT-fs (loop5): Can't find a valid FAT filesystem [ 467.669793][ T7435] loop1: p3 start 225 is beyond EOD, truncated [ 467.676012][ T7435] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x204, &(0x7f00000000c0)=ANY=[]) 09:49:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:34 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03002580000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x28, 0x13, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}}, 0x0) 09:49:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040000220240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 467.724836][ T7435] loop1: detected capacity change from 0 to 1 [ 467.829036][ T7490] loop5: detected capacity change from 0 to 6 [ 467.843607][ T7490] FAT-fs (loop5): bogus sectors per cluster 0 [ 467.849951][ T7490] FAT-fs (loop5): Can't find a valid FAT filesystem [ 467.871129][ T7497] loop1: detected capacity change from 0 to 1 [ 467.911057][ T7497] loop1: p2 p3 p4 [ 467.914888][ T7497] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 467.916141][ T7490] loop5: detected capacity change from 0 to 6 [ 467.924367][ T7497] loop1: p3 start 225 is beyond EOD, truncated [ 467.934862][ T7497] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 467.948246][ T7490] FAT-fs (loop5): bogus sectors per cluster 0 [ 467.954416][ T7490] FAT-fs (loop5): Can't find a valid FAT filesystem [ 467.982159][ T7497] loop1: detected capacity change from 0 to 1 [ 468.031020][ T7497] loop1: p2 p3 p4 [ 468.034933][ T7497] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 468.043228][ T7497] loop1: p3 start 225 is beyond EOD, truncated [ 468.049396][ T7497] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x2, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:34 executing program 3: socket(0x2, 0x0, 0x1ff) 09:49:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x224, &(0x7f00000000c0)=ANY=[]) 09:49:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x15e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040000cf0240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:34 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03002680000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x50, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0) 09:49:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x228, &(0x7f00000000c0)=ANY=[]) 09:49:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:34 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000002200), &(0x7f0000002240)={'fscrypt:', @desc2}, &(0x7f0000002280)={0x0, "370b0f5bcf24685906e8f98f375d996cb8a42ceddb9724151d3ed9a9fdbf234f69370f82d19080dd5648d817f550c45db938ebc06a91424fb6c389245b63cf07"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 09:49:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x229, &(0x7f00000000c0)=ANY=[]) [ 468.493247][ T7530] loop1: detected capacity change from 0 to 1 [ 468.503868][ T7531] loop5: detected capacity change from 0 to 6 09:49:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x300, &(0x7f00000000c0)=ANY=[]) [ 468.560893][ T7531] FAT-fs (loop5): bogus sectors per cluster 0 [ 468.567025][ T7531] FAT-fs (loop5): Can't find a valid FAT filesystem [ 468.570894][ T7530] loop1: p2 p3 p4 [ 468.583905][ T7530] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 468.604995][ T7531] loop5: detected capacity change from 0 to 6 [ 468.613006][ T7530] loop1: p3 start 225 is beyond EOD, truncated [ 468.619231][ T7530] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 468.634500][ T7531] FAT-fs (loop5): bogus sectors per cluster 0 [ 468.640696][ T7531] FAT-fs (loop5): Can't find a valid FAT filesystem [ 468.658772][ T7530] loop1: detected capacity change from 0 to 1 [ 468.704673][ T7530] loop1: p2 p3 p4 [ 468.708473][ T7530] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 468.716866][ T7530] loop1: p3 start 225 is beyond EOD, truncated [ 468.723098][ T7530] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 468.821844][ T1032] loop1: p2 p3 p4 [ 468.825759][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 468.833587][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 468.839834][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x4, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:35 executing program 3: socket(0x10, 0x2, 0x1) 09:49:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x383, &(0x7f00000000c0)=ANY=[]) 09:49:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040001020240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:35 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03002e80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x384, &(0x7f00000000c0)=ANY=[]) 09:49:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:35 executing program 3: add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @auto=[0x63, 0x35, 0x0, 0x34, 0x62]}, &(0x7f00000002c0)={0x0, "1d774e64fc8ee0758a9f2939c2ee84f1c4148e942d808b7b3c12a36493fc3c9fe09d843313efdc5ae35bad04926c44fe010528c9f66f1c3d51ce4065e2f18f15"}, 0x48, 0xfffffffffffffffc) [ 469.406381][ T7591] loop1: detected capacity change from 0 to 1 [ 469.456101][ T7591] loop1: p2 p3 p4 [ 469.463280][ T7591] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 469.474494][ T7601] loop5: detected capacity change from 0 to 6 [ 469.474998][ T7591] loop1: p3 start 225 is beyond EOD, truncated [ 469.486914][ T7591] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 469.496041][ T7601] FAT-fs (loop5): bogus sectors per cluster 0 09:49:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x385, &(0x7f00000000c0)=ANY=[]) 09:49:35 executing program 3: add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x10, 0x0) 09:49:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x386, &(0x7f00000000c0)=ANY=[]) [ 469.502177][ T7601] FAT-fs (loop5): Can't find a valid FAT filesystem [ 469.542540][ T7591] loop1: detected capacity change from 0 to 1 [ 469.565078][ T7591] loop1: p2 p3 p4 [ 469.568921][ T7591] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 469.576610][ T7591] loop1: p3 start 225 is beyond EOD, truncated [ 469.582992][ T7591] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 469.631941][ T7601] loop5: detected capacity change from 0 to 6 [ 469.642557][ T7601] FAT-fs (loop5): bogus sectors per cluster 0 [ 469.648819][ T7601] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x7, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf250f"], 0x140}}, 0x0) 09:49:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x387, &(0x7f00000000c0)=ANY=[]) 09:49:36 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03004880000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040001030240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x388, &(0x7f00000000c0)=ANY=[]) 09:49:36 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x95) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x1600bd7f, 0x0, 0x0) [ 470.353008][ T7661] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.3'. [ 470.359523][ T7668] loop1: detected capacity change from 0 to 1 [ 470.375548][ T7674] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.3'. [ 470.375921][ T7670] loop5: detected capacity change from 0 to 6 09:49:36 executing program 3: request_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0) [ 470.406784][ T7668] loop1: p2 p3 p4 [ 470.414035][ T7668] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 470.422462][ T7668] loop1: p3 start 225 is beyond EOD, truncated [ 470.422942][ T7670] FAT-fs (loop5): bogus sectors per cluster 0 [ 470.428640][ T7668] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 470.434751][ T7670] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x389, &(0x7f00000000c0)=ANY=[]) 09:49:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 470.484973][ T7668] loop1: detected capacity change from 0 to 1 [ 470.538324][ T7668] loop1: p2 p3 p4 [ 470.542518][ T7668] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 470.553848][ T7668] loop1: p3 start 225 is beyond EOD, truncated [ 470.560713][ T7668] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 470.568458][ T7670] loop5: detected capacity change from 0 to 6 [ 470.577337][ T7670] FAT-fs (loop5): bogus sectors per cluster 0 [ 470.583675][ T7670] FAT-fs (loop5): Can't find a valid FAT filesystem [ 470.681689][ T1032] loop1: p2 p3 p4 [ 470.685553][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 470.693400][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 470.699666][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x9, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:37 executing program 3: socketpair(0x11, 0x3, 0x300, &(0x7f0000000040)) 09:49:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x38a, &(0x7f00000000c0)=ANY=[]) 09:49:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:37 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03004c80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040001040240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x38b, &(0x7f00000000c0)=ANY=[]) 09:49:37 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x95) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f00000000c0), 0x0) 09:49:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x3a5, &(0x7f00000000c0)=ANY=[]) [ 471.269938][ T7735] loop5: detected capacity change from 0 to 6 [ 471.279952][ T7735] FAT-fs (loop5): bogus sectors per cluster 0 [ 471.286082][ T7735] FAT-fs (loop5): Can't find a valid FAT filesystem [ 471.287344][ T7737] loop1: detected capacity change from 0 to 1 [ 471.341261][ T7737] loop1: p2 p3 p4 [ 471.345195][ T7737] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 471.362331][ T7735] loop5: detected capacity change from 0 to 6 [ 471.368779][ T7737] loop1: p3 start 225 is beyond EOD, truncated [ 471.375199][ T7737] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 471.376634][ T7735] FAT-fs (loop5): bogus sectors per cluster 0 09:49:37 executing program 3: r0 = socket(0x11, 0x2, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f00000004c0)={0x0}}, 0x0) 09:49:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 471.388417][ T7735] FAT-fs (loop5): Can't find a valid FAT filesystem [ 471.466155][ T7737] loop1: detected capacity change from 0 to 1 [ 471.507147][ T7737] loop1: p2 p3 p4 [ 471.511160][ T7737] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 471.519158][ T7737] loop1: p3 start 225 is beyond EOD, truncated [ 471.525547][ T7737] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 471.611712][ T1032] loop1: p2 p3 p4 [ 471.615681][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 471.623496][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 471.629665][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x700, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:38 executing program 3: keyctl$update(0x2, 0x0, &(0x7f0000000000)="14", 0x1) 09:49:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x3a6, &(0x7f00000000c0)=ANY=[]) 09:49:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040001050240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:38 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03006080000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:38 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c938792cb65277a987ce18540a8874e6b239cc78e8474f6840e7e9bedf4311fd850391ef2e12752af5e79d7b37c8d829eacd59df8210", 0x36, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 09:49:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x402, &(0x7f00000000c0)=ANY=[]) 09:49:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 472.209673][ T7801] loop5: detected capacity change from 0 to 6 [ 472.227572][ T7801] FAT-fs (loop5): bogus sectors per cluster 0 [ 472.233703][ T7801] FAT-fs (loop5): Can't find a valid FAT filesystem [ 472.249895][ T7805] loop1: detected capacity change from 0 to 1 09:49:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x406, &(0x7f00000000c0)=ANY=[]) 09:49:38 executing program 3: add_key$keyring(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) [ 472.310927][ T7805] loop1: p2 p3 p4 [ 472.314784][ T7805] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 472.326895][ T7801] loop5: detected capacity change from 0 to 6 [ 472.333346][ T7805] loop1: p3 start 225 is beyond EOD, truncated [ 472.339537][ T7805] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 472.348513][ T7801] FAT-fs (loop5): bogus sectors per cluster 0 [ 472.354656][ T7801] FAT-fs (loop5): Can't find a valid FAT filesystem [ 472.428092][ T7805] loop1: detected capacity change from 0 to 1 [ 472.475684][ T7805] loop1: p2 p3 p4 [ 472.479744][ T7805] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 472.487842][ T7805] loop1: p3 start 225 is beyond EOD, truncated [ 472.494034][ T7805] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 473.059357][ T7831] ================================================================== [ 473.067484][ T7831] BUG: KCSAN: data-race in __anon_vma_prepare / wp_page_copy [ 473.074878][ T7831] [ 473.077197][ T7831] write to 0xffff88810944abc8 of 8 bytes by task 7855 on cpu 1: [ 473.084823][ T7831] __anon_vma_prepare+0x12f/0x2d0 [ 473.089861][ T7831] wp_page_copy+0xb06/0x10c0 [ 473.094452][ T7831] do_wp_page+0x5a8/0xba0 [ 473.098783][ T7831] handle_mm_fault+0xb31/0x1a70 [ 473.103644][ T7831] do_user_addr_fault+0x60c/0xc00 [ 473.108672][ T7831] exc_page_fault+0x94/0x230 [ 473.113381][ T7831] asm_exc_page_fault+0x1e/0x30 [ 473.118241][ T7831] __put_user_nocheck_4+0x3/0x11 [ 473.123179][ T7831] ____sys_recvmsg+0x201/0x310 [ 473.127939][ T7831] do_recvmmsg+0x34c/0x9e0 [ 473.132352][ T7831] __x64_sys_recvmmsg+0xcf/0x150 [ 473.137290][ T7831] do_syscall_64+0x4a/0x90 [ 473.141709][ T7831] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 473.147620][ T7831] [ 473.149942][ T7831] read to 0xffff88810944abc8 of 8 bytes by task 7831 on cpu 0: [ 473.157479][ T7831] wp_page_copy+0x5f/0x10c0 [ 473.161999][ T7831] do_wp_page+0x5a8/0xba0 [ 473.166332][ T7831] handle_mm_fault+0xb31/0x1a70 [ 473.171185][ T7831] do_user_addr_fault+0x60c/0xc00 [ 473.176210][ T7831] exc_page_fault+0x94/0x230 [ 473.180810][ T7831] asm_exc_page_fault+0x1e/0x30 [ 473.185666][ T7831] __put_user_nocheck_4+0x3/0x11 [ 473.190731][ T7831] ____sys_recvmsg+0x201/0x310 [ 473.195506][ T7831] do_recvmmsg+0x34c/0x9e0 [ 473.199934][ T7831] __x64_sys_recvmmsg+0xcf/0x150 [ 473.204883][ T7831] do_syscall_64+0x4a/0x90 [ 473.209301][ T7831] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 473.215199][ T7831] [ 473.217515][ T7831] Reported by Kernel Concurrency Sanitizer on: [ 473.223653][ T7831] CPU: 0 PID: 7831 Comm: syz-executor.2 Tainted: G W 5.13.0-rc2-syzkaller #0 [ 473.233714][ T7831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.243762][ T7831] ================================================================== 09:49:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x900, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x500, &(0x7f00000000c0)=ANY=[]) 09:49:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040001060240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:39 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03006880000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x100, 0x0, 0x1f, 0x9, "212fc32bbe5d590386e25617b3272d32f6ca4adb52877252baf0a37b380cdc4b144ebd2b3effc238ac5f2598e5efb4f9b603c4bdb9df4eeeaf48d1c8cb63ee56", "5777662863f62d81ff7ca68322a9577095d551b91f78d7074e9ec920a25ebce1"}) 09:49:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 09:49:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x600, &(0x7f00000000c0)=ANY=[]) 09:49:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040001070240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 473.353650][ T7872] loop5: detected capacity change from 0 to 6 [ 473.355215][ T7871] loop1: detected capacity change from 0 to 1 [ 473.376601][ T7872] FAT-fs (loop5): bogus sectors per cluster 0 [ 473.382740][ T7872] FAT-fs (loop5): Can't find a valid FAT filesystem [ 473.391941][ T7871] loop1: p2 p3 p4 [ 473.395881][ T7871] loop1: p2 size 1073872896 extends beyond EOD, truncated 09:49:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x604, &(0x7f00000000c0)=ANY=[]) 09:49:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09539000000000000000190000000c"], 0x20}}, 0x0) [ 473.425369][ T7871] loop1: p3 start 225 is beyond EOD, truncated [ 473.431613][ T7871] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 473.479664][ T7901] loop5: detected capacity change from 0 to 6 [ 473.526497][ T7871] loop1: detected capacity change from 0 to 1 [ 473.546941][ T7901] FAT-fs (loop5): bogus sectors per cluster 0 [ 473.553083][ T7901] FAT-fs (loop5): Can't find a valid FAT filesystem [ 473.604351][ T7901] loop5: detected capacity change from 0 to 6 [ 473.621343][ T7901] FAT-fs (loop5): bogus sectors per cluster 0 [ 473.627640][ T7901] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0xec0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x700, &(0x7f00000000c0)=ANY=[]) 09:49:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:40 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000100)="5332904bb0ca97fa9ad9e65c5b9e022e", 0x10) 09:49:40 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03006c80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040001080240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x900, &(0x7f00000000c0)=ANY=[]) 09:49:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0xa00, &(0x7f00000000c0)=ANY=[]) 09:49:40 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x301, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "956db81b360b746b1a6b2ff9740cf73766a6dd9edb58bc0180b10f235e029fd31a4e3560f497af5bd6eced278557b7ed730774dde7cb1c85d3df5031f5fb0681", "06126429c9074a27849e51c8564da15c00f9d1447d98249df97269d4360fab601b5b0faafc54579330f422cf4823acbdbbded34c85765e82614da1d257da4500", "8a1cb039004169d95164916fe0611b5c82a694277be888e70cb173879f9c1015"}) 09:49:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 474.289494][ T7937] loop1: detected capacity change from 0 to 1 [ 474.301930][ T7940] loop5: detected capacity change from 0 to 6 [ 474.316973][ T7940] FAT-fs (loop5): bogus sectors per cluster 0 [ 474.323097][ T7940] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0xb00, &(0x7f00000000c0)=ANY=[]) 09:49:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040001090240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 474.360752][ T7937] loop1: p2 p3 p4 [ 474.372353][ T7937] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 474.388576][ T7937] loop1: p3 start 225 is beyond EOD, truncated [ 474.394793][ T7937] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 474.429488][ T7968] loop5: detected capacity change from 0 to 6 [ 474.456360][ T7968] FAT-fs (loop5): bogus sectors per cluster 0 [ 474.462523][ T7968] FAT-fs (loop5): Can't find a valid FAT filesystem [ 474.532808][ T7968] loop5: detected capacity change from 0 to 6 [ 474.546703][ T7968] FAT-fs (loop5): bogus sectors per cluster 0 [ 474.552847][ T7968] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x8ec0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 09:49:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0xc00, &(0x7f00000000c0)=ANY=[]) 09:49:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:41 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03007480000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000400010a0240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:41 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xab) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 09:49:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0xd00, &(0x7f00000000c0)=ANY=[]) 09:49:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0xe00, &(0x7f00000000c0)=ANY=[]) [ 475.224033][ T7995] loop5: detected capacity change from 0 to 6 [ 475.239502][ T7995] FAT-fs (loop5): bogus sectors per cluster 0 [ 475.245627][ T7995] FAT-fs (loop5): Can't find a valid FAT filesystem [ 475.265343][ T8001] loop1: detected capacity change from 0 to 1 09:49:41 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x541d03, 0x0) 09:49:41 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) [ 475.320152][ T8001] loop1: p2 p3 p4 [ 475.325467][ T8001] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 475.332775][ T7995] loop5: detected capacity change from 0 to 6 [ 475.371720][ T7995] FAT-fs (loop5): bogus sectors per cluster 0 [ 475.377850][ T7995] FAT-fs (loop5): Can't find a valid FAT filesystem [ 475.397693][ T8001] loop1: p3 start 225 is beyond EOD, truncated [ 475.403913][ T8001] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0xc00e, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, 0x0, 0x80800) 09:49:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0xe01, &(0x7f00000000c0)=ANY=[]) 09:49:42 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03007a80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000400010b0240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0xf00, &(0x7f00000000c0)=ANY=[]) 09:49:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5e01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:42 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x18}, 0x0) io_uring_enter(r0, 0x42ab, 0x0, 0x0, 0x0, 0x0) 09:49:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x1020, &(0x7f00000000c0)=ANY=[]) [ 476.169318][ T8055] loop5: detected capacity change from 0 to 6 [ 476.180154][ T8055] FAT-fs (loop5): bogus sectors per cluster 0 [ 476.186276][ T8055] FAT-fs (loop5): Can't find a valid FAT filesystem [ 476.197393][ T8060] loop1: detected capacity change from 0 to 1 09:49:42 executing program 3: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 09:49:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x1100, &(0x7f00000000c0)=ANY=[]) [ 476.261850][ T8060] loop1: p2 p3 p4 [ 476.265720][ T8060] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 476.274742][ T8055] loop5: detected capacity change from 0 to 6 [ 476.279455][ T8060] loop1: p3 start 225 is beyond EOD, truncated [ 476.281883][ T8055] FAT-fs (loop5): bogus sectors per cluster 0 [ 476.287034][ T8060] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 476.300383][ T8055] FAT-fs (loop5): Can't find a valid FAT filesystem [ 476.391252][ T8060] loop1: detected capacity change from 0 to 1 [ 476.420959][ T8060] loop1: p2 p3 p4 [ 476.424945][ T8060] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 476.433394][ T8060] loop1: p3 start 225 is beyond EOD, truncated [ 476.439568][ T8060] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 476.552237][ T1032] loop1: p2 p3 p4 [ 476.556073][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 476.564410][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 476.570600][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0xc08e, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000400010c0240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:43 executing program 3: add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) 09:49:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x1200, &(0x7f00000000c0)=ANY=[]) 09:49:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:43 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff0300fe80000000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x126b, &(0x7f00000000c0)=ANY=[]) 09:49:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:43 executing program 3: r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000740)={0x14c, r0, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x14}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x14c}}, 0x0) 09:49:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x1300, &(0x7f00000000c0)=ANY=[]) [ 477.121368][ T8126] loop1: detected capacity change from 0 to 1 [ 477.142453][ T8130] loop5: detected capacity change from 0 to 6 [ 477.189516][ T8126] loop1: p2 p3 p4 [ 477.193393][ T8130] FAT-fs (loop5): bogus sectors per cluster 0 [ 477.199463][ T8130] FAT-fs (loop5): Can't find a valid FAT filesystem [ 477.208527][ T8126] loop1: p2 size 1073872896 extends beyond EOD, truncated 09:49:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000004940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000010000000000241424030a04"], 0x20}}, 0x0) [ 477.242904][ T8126] loop1: p3 start 225 is beyond EOD, truncated [ 477.249173][ T8126] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 477.320207][ T8130] loop5: detected capacity change from 0 to 6 [ 477.343100][ T8126] loop1: detected capacity change from 0 to 1 [ 477.355193][ T8130] FAT-fs (loop5): bogus sectors per cluster 0 [ 477.361357][ T8130] FAT-fs (loop5): Can't find a valid FAT filesystem [ 477.391216][ T8126] loop1: p2 p3 p4 [ 477.395230][ T8126] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 477.403133][ T8126] loop1: p3 start 225 is beyond EOD, truncated [ 477.409291][ T8126] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x40000, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x1800, &(0x7f00000000c0)=ANY=[]) 09:49:44 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000002d) 09:49:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000400010d0240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:44 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000000200000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x1900, &(0x7f00000000c0)=ANY=[]) 09:49:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:44 executing program 3: io_setup(0xb97, &(0x7f0000000500)=0x0) r1 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001900)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 09:49:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x2000, &(0x7f00000000c0)=ANY=[]) 09:49:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 478.023601][ T8197] loop5: detected capacity change from 0 to 6 [ 478.039668][ T8197] FAT-fs (loop5): bogus sectors per cluster 0 [ 478.045846][ T8197] FAT-fs (loop5): Can't find a valid FAT filesystem [ 478.048588][ T8205] loop1: detected capacity change from 0 to 1 09:49:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x38}}, 0x0) [ 478.101171][ T8205] loop1: p2 p3 p4 [ 478.105565][ T8205] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 478.114198][ T8205] loop1: p3 start 225 is beyond EOD, truncated [ 478.116727][ T8197] loop5: detected capacity change from 0 to 6 [ 478.120421][ T8205] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 478.157296][ T8197] FAT-fs (loop5): bogus sectors per cluster 0 [ 478.163436][ T8197] FAT-fs (loop5): Can't find a valid FAT filesystem [ 478.182173][ T8205] loop1: detected capacity change from 0 to 1 [ 478.256625][ T8205] loop1: p2 p3 p4 [ 478.260532][ T8205] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 478.268315][ T8205] loop1: p3 start 225 is beyond EOD, truncated [ 478.274563][ T8205] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x1000000, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xff07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x2010, &(0x7f00000000c0)=ANY=[]) 09:49:45 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 09:49:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000400010e0240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:45 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000026a70000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:45 executing program 3: r0 = eventfd(0x0) fstat(r0, &(0x7f0000000100)) 09:49:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x2200, &(0x7f00000000c0)=ANY=[]) 09:49:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:45 executing program 3: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@fat=@nfs_nostale_ro}, {@fat=@flush}]}) [ 478.986626][ T8270] loop5: detected capacity change from 0 to 6 [ 478.992897][ T8272] loop1: detected capacity change from 0 to 1 [ 479.009198][ T8270] FAT-fs (loop5): bogus sectors per cluster 0 [ 479.015339][ T8270] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x2402, &(0x7f00000000c0)=ANY=[]) 09:49:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000400010f0240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 479.050929][ T8272] loop1: p2 p3 p4 [ 479.056934][ T8272] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 479.084370][ T8272] loop1: p3 start 225 is beyond EOD, truncated [ 479.090579][ T8272] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 479.121828][ T8297] loop5: detected capacity change from 0 to 6 [ 479.131600][ T8297] FAT-fs (loop5): bogus sectors per cluster 0 [ 479.137683][ T8297] FAT-fs (loop5): Can't find a valid FAT filesystem [ 479.210182][ T8297] loop5: detected capacity change from 0 to 6 [ 479.226348][ T8297] FAT-fs (loop5): bogus sectors per cluster 0 [ 479.232490][ T8297] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x2000000, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:46 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000080020000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x2500, &(0x7f00000000c0)=ANY=[]) 09:49:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1b3ae8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:46 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, &(0x7f0000000000)="b8e9e435b48a5491730e29ab93ea0ef99e3440482d07ac232aa6b169d1a4002663ad6dba0d331068c602a746b472cf868b78f0d508e670fbd8222e1600b31c38a5df443a", 0x44, 0x10, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0xfffffffffffffe85) 09:49:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040001100240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x268f, &(0x7f00000000c0)=ANY=[]) 09:49:46 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000000180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001280)=""/7, 0x7}], 0x4, &(0x7f0000002780)=[{&(0x7f0000001300)=""/67, 0x43}, {0x0}, {0x0}, {&(0x7f00000014c0)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 09:49:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x26af, &(0x7f00000000c0)=ANY=[]) [ 479.950947][ T8328] loop5: detected capacity change from 0 to 6 [ 479.957469][ T8327] loop1: detected capacity change from 0 to 1 09:49:46 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000002380)=[{&(0x7f0000000080)="0e8b0485c293f5c888cca072af8d4bd20c9d2b8e64a52597386a7716fec5d7205d85703aae38bba5a48536374350852832ff02c0b71ef7c79e4cece8670b5d", 0x3f, 0x2}, {&(0x7f0000000200)="2248104256c105899a5ce0b79ec93a1fad45d93ac1be8f13ac048c8d1ea60c9693271edd66d5c941d17965ace835f5b4ecf8e944b3b2eebcc6c663bb17ba38314502fa7ffd5f92e2dd2f71420e2c12a5b55a792401e5d4f87bf4b3bbbc1a220ca5a94418fe2545a3632db23bd8c42e7e57fdc502ca30273405878feadd826209de0b2524815f5b6fbcc9d382edfec398807566d4fc14e84fea2ee8478a", 0x9d, 0x20}], 0x0, 0x0) 09:49:46 executing program 3: syz_open_dev$vcsn(&(0x7f0000001880), 0xf961, 0x280) [ 480.018424][ T8327] loop1: p2 p3 p4 [ 480.024533][ T8328] FAT-fs (loop5): bogus sectors per cluster 0 [ 480.026736][ T8327] loop1: p2 size 1073872896 extends beyond EOD, [ 480.030657][ T8328] FAT-fs (loop5): Can't find a valid FAT filesystem [ 480.037017][ T8327] truncated [ 480.051983][ T8327] loop1: p3 start 225 is beyond EOD, truncated [ 480.058170][ T8327] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 480.123294][ T8327] loop1: detected capacity change from 0 to 1 [ 480.147935][ T8327] loop1: p2 p3 p4 [ 480.152130][ T8327] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 480.159892][ T8328] loop5: detected capacity change from 0 to 6 [ 480.168998][ T8328] FAT-fs (loop5): bogus sectors per cluster 0 [ 480.175130][ T8328] FAT-fs (loop5): Can't find a valid FAT filesystem [ 480.183602][ T8327] loop1: p3 start 225 is beyond EOD, truncated [ 480.189838][ T8327] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 480.235754][ T1032] loop1: p2 p3 p4 [ 480.240307][ T1032] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 480.249987][ T1032] loop1: p3 start 225 is beyond EOD, truncated [ 480.256316][ T1032] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x26bc, &(0x7f00000000c0)=ANY=[]) 09:49:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), 0xffffffffffffffff) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) 09:49:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040001110240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:47 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000080030000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @local}, 'veth1_to_bridge\x00'}) 09:49:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x26bf, &(0x7f00000000c0)=ANY=[]) 09:49:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x306, @multicast}, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'bridge_slave_1\x00'}) 09:49:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x2802, &(0x7f00000000c0)=ANY=[]) [ 480.909905][ T8394] loop5: detected capacity change from 0 to 6 [ 480.930465][ T8394] FAT-fs (loop5): bogus sectors per cluster 0 [ 480.936593][ T8394] FAT-fs (loop5): Can't find a valid FAT filesystem [ 480.943274][ T8399] loop1: detected capacity change from 0 to 1 09:49:47 executing program 3: socketpair(0x27, 0x0, 0x0, &(0x7f0000000080)) [ 480.990962][ T8399] loop1: p2 p3 p4 [ 480.994881][ T8399] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 481.008905][ T8399] loop1: p3 start 225 is beyond EOD, truncated [ 481.015132][ T8399] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 481.022467][ T8394] loop5: detected capacity change from 0 to 6 [ 481.039181][ T8394] FAT-fs (loop5): bogus sectors per cluster 0 [ 481.045340][ T8394] FAT-fs (loop5): Can't find a valid FAT filesystem [ 481.105853][ T8399] loop1: detected capacity change from 0 to 1 [ 481.147498][ T8399] loop1: p2 p3 p4 [ 481.151350][ T8399] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 481.159156][ T8399] loop1: p3 start 225 is beyond EOD, truncated [ 481.165341][ T8399] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x7000000, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x2902, &(0x7f00000000c0)=ANY=[]) 09:49:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}}, 0x0) 09:49:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040001120240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:48 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000080040000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x3f00, &(0x7f00000000c0)=ANY=[]) 09:49:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8904, 0x0) 09:49:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x4000, &(0x7f00000000c0)=ANY=[]) [ 481.878082][ T8459] loop5: detected capacity change from 0 to 6 [ 481.880092][ T8460] loop1: detected capacity change from 0 to 1 [ 481.900743][ T8459] FAT-fs (loop5): bogus sectors per cluster 0 [ 481.906847][ T8459] FAT-fs (loop5): Can't find a valid FAT filesystem 09:49:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x4800, &(0x7f00000000c0)=ANY=[]) 09:49:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) [ 481.973366][ T8460] loop1: p2 p3 p4 [ 481.979962][ T8460] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 481.992163][ T8460] loop1: p3 start 225 is beyond EOD, truncated [ 481.998378][ T8460] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 482.014594][ T8459] loop5: detected capacity change from 0 to 6 [ 482.025426][ T8459] FAT-fs (loop5): bogus sectors per cluster 0 [ 482.031550][ T8459] FAT-fs (loop5): Can't find a valid FAT filesystem [ 482.057144][ T8460] loop1: detected capacity change from 0 to 1 [ 482.113389][ T8460] loop1: p2 p3 p4 [ 482.117205][ T8460] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 482.128099][ T8460] loop1: p3 start 225 is beyond EOD, truncated [ 482.134306][ T8460] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xff, 0xff, 0x0, 0x5a, 0x0, 0x9, 0x1d322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x1801a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x9000000, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:49:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x4c00, &(0x7f00000000c0)=ANY=[]) 09:49:49 executing program 3: pselect6(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)={0x2}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000180)={[0x7e000000000000]}, 0x8}) 09:49:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040001220240000004f0", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[]) 09:49:49 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="020181ffff03000080050000000000ffffffa6000800000000000000024000ffffff82001000e1000000887700720030071aa6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:49:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x6000, &(0x7f00000000c0)=ANY=[]) 09:49:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:49:49 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000030c0)={0x0, 0x989680}) 09:49:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x6800, &(0x7f00000000c0)=ANY=[]) [ 482.829654][ T8527] loop1: detected capacity change from 0 to 1 [ 482.839224][ T8524] loop5: detected capacity change from 0 to 6 09:49:49 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) [ 482.893118][ T8527] loop1: p2 p3 p4 [ 482.898551][ T8524] FAT-fs (loop5): bogus sectors per cluster 0 [ 482.898558][ T8527] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 482.904732][ T8524] FAT-fs (loop5): Can't find a valid FAT filesystem [ 482.912412][ T8527] loop1: p3 start 225 is beyond EOD, truncated [ 482.924904][ T8527] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:49:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f001", 0x17}, {0x0, 0x0, 0x600}], 0x6b12, &(0x7f00000000c0)=ANY=[]) [ 483.010706][ T8527] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 483.030878][ T8524] loop5: detected capacity change from 0 to 6 [ 483.039273][ T8524] FAT-fs (loop5): bogus sectors per cluster 0 [ 483.045395][ T8524] FAT-fs (loop5): Can't find a valid FAT filesystem [ 483.049113][ T8527] loop1: detected capacity change from 0 to 1