, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2064.889106] syz-executor.6: attempt to access beyond end of device
[ 2064.889106] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2064.890649] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2064.911643] loop1: detected capacity change from 0 to 40
[ 2064.914713] loop0: detected capacity change from 0 to 40
[ 2064.915785] loop7: detected capacity change from 0 to 40
12:32:57 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2064.932967] loop5: detected capacity change from 0 to 40
12:32:57 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x14)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

[ 2064.976154] syz-executor.1: attempt to access beyond end of device
[ 2064.976154] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
12:32:57 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000)

[ 2065.016136] loop3: detected capacity change from 0 to 40
12:32:57 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:32:57 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(0x0, 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000)

12:32:57 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2065.048521] loop0: detected capacity change from 0 to 40
[ 2065.056803] loop4: detected capacity change from 0 to 40
[ 2065.084996] loop5: detected capacity change from 0 to 40
[ 2065.097307] syz-executor.2: attempt to access beyond end of device
[ 2065.097307] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2065.098698] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:32:57 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000)

12:32:57 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2065.133869] loop7: detected capacity change from 0 to 40
12:32:57 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2065.163306] loop6: detected capacity change from 0 to 40
[ 2065.172771] loop0: detected capacity change from 0 to 40
12:32:57 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2065.189853] syz-executor.1: attempt to access beyond end of device
[ 2065.189853] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2065.219504] loop5: detected capacity change from 0 to 40
12:32:57 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000)

[ 2065.286895] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2065.288547] loop3: detected capacity change from 0 to 40
[ 2065.300664] loop0: detected capacity change from 0 to 40
[ 2065.330490] loop2: detected capacity change from 0 to 40
[ 2065.395959] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2065.420678] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2065.462301] Buffer I/O error on dev loop3, logical block 10, lost async page write
12:33:10 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:33:10 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:33:10 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:33:10 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:33:10 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x8000)

12:33:10 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:33:10 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(0x0, 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000)

[ 2077.902627] loop7: detected capacity change from 0 to 40
[ 2077.924675] loop2: detected capacity change from 0 to 40
12:33:10 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', 0x0, 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2077.970170] loop3: detected capacity change from 0 to 40
[ 2077.974950] loop4: detected capacity change from 0 to 40
[ 2077.977263] loop6: detected capacity change from 0 to 40
[ 2077.979924] loop1: detected capacity change from 0 to 40
[ 2077.982715] loop0: detected capacity change from 0 to 40
[ 2077.986805] loop5: detected capacity change from 0 to 40
12:33:10 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(0x0, 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000)

[ 2078.107178] bio_check_eod: 4 callbacks suppressed
[ 2078.107206] syz-executor.1: attempt to access beyond end of device
[ 2078.107206] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
12:33:10 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x8000)

[ 2078.208467] loop7: detected capacity change from 0 to 40
[ 2078.258601] loop0: detected capacity change from 0 to 40
12:33:10 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x8000)

12:33:10 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000)

[ 2078.417972] loop0: detected capacity change from 0 to 40
[ 2078.460439] loop7: detected capacity change from 0 to 40
[ 2078.528992] syz-executor.1: attempt to access beyond end of device
[ 2078.528992] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
12:33:10 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8000)

12:33:11 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000)

[ 2078.665696] loop0: detected capacity change from 0 to 40
[ 2078.680806] loop7: detected capacity change from 0 to 40
12:33:11 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2078.787159] loop1: detected capacity change from 0 to 40
12:33:11 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000)

[ 2078.845176] syz-executor.1: attempt to access beyond end of device
[ 2078.845176] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
12:33:11 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8000)

[ 2078.888926] loop7: detected capacity change from 0 to 40
[ 2078.934960] loop0: detected capacity change from 0 to 40
[ 2079.220686] syz-executor.1: attempt to access beyond end of device
[ 2079.220686] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2093.703670] loop7: detected capacity change from 0 to 40
12:33:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8000)

12:33:26 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:33:26 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:33:26 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:33:26 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:33:26 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:33:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:33:26 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000)

[ 2093.711620] loop0: detected capacity change from 0 to 40
[ 2093.714289] loop1: detected capacity change from 0 to 40
12:33:26 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000)

[ 2093.745333] loop4: detected capacity change from 0 to 40
[ 2093.749990] loop6: detected capacity change from 0 to 40
[ 2093.751259] loop5: detected capacity change from 0 to 40
[ 2093.754098] syz-executor.1: attempt to access beyond end of device
[ 2093.754098] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2093.770784] loop3: detected capacity change from 0 to 40
[ 2093.775566] loop2: detected capacity change from 0 to 40
[ 2093.787272] syz-executor.1: attempt to access beyond end of device
[ 2093.787272] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
12:33:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000)

[ 2093.814663] loop7: detected capacity change from 0 to 40
12:33:26 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

[ 2093.855009] loop0: detected capacity change from 0 to 40
12:33:26 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:33:26 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000)

[ 2093.928791] loop5: detected capacity change from 0 to 40
[ 2093.945566] loop1: detected capacity change from 0 to 40
12:33:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000)

[ 2093.973757] loop7: detected capacity change from 0 to 40
[ 2093.992096] loop0: detected capacity change from 0 to 40
12:33:26 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2094.024324] syz-executor.1: attempt to access beyond end of device
[ 2094.024324] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
12:33:26 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x8000)

[ 2094.074106] syz-executor.1: attempt to access beyond end of device
[ 2094.074106] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2094.076410] loop5: detected capacity change from 0 to 40
12:33:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000)

[ 2094.131580] loop7: detected capacity change from 0 to 40
[ 2094.167771] syz-executor.6: attempt to access beyond end of device
[ 2094.167771] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2094.168792] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2094.171953] loop0: detected capacity change from 0 to 40
[ 2094.189759] syz-executor.3: attempt to access beyond end of device
[ 2094.189759] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2094.191171] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2094.195458] syz-executor.2: attempt to access beyond end of device
[ 2094.195458] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2094.197019] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2094.355689] syz-executor.5: attempt to access beyond end of device
[ 2094.355689] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2094.356876] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:33:41 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2108.787907] loop6: detected capacity change from 0 to 40
12:33:41 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:33:41 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:33:41 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:33:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:33:41 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x8000)

12:33:41 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:33:41 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x0)

[ 2108.794514] loop4: detected capacity change from 0 to 40
[ 2108.796841] loop5: detected capacity change from 0 to 40
[ 2108.796925] loop2: detected capacity change from 0 to 40
[ 2108.798706] loop7: detected capacity change from 0 to 40
[ 2108.801482] loop1: detected capacity change from 0 to 40
[ 2108.822538] loop3: detected capacity change from 0 to 40
[ 2108.826209] loop0: detected capacity change from 0 to 40
[ 2108.881002] syz-executor.1: attempt to access beyond end of device
[ 2108.881002] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2108.946461] syz-executor.5: attempt to access beyond end of device
[ 2108.946461] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2108.947570] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2108.951969] syz-executor.1: attempt to access beyond end of device
[ 2108.951969] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2109.073999] syz-executor.2: attempt to access beyond end of device
[ 2109.073999] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2109.075697] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2109.089459] syz-executor.3: attempt to access beyond end of device
[ 2109.089459] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2109.091200] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2109.270354] syz-executor.6: attempt to access beyond end of device
[ 2109.270354] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2109.280354] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2123.738470] loop0: detected capacity change from 0 to 40
12:33:56 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:33:56 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:33:56 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:33:56 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:33:56 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x8000)

12:33:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x0)

12:33:56 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:33:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

[ 2123.747066] loop6: detected capacity change from 0 to 40
[ 2123.756765] loop1: detected capacity change from 0 to 40
[ 2123.781911] loop7: detected capacity change from 0 to 40
[ 2123.787812] loop2: detected capacity change from 0 to 40
[ 2123.789975] syz-executor.1: attempt to access beyond end of device
[ 2123.789975] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2123.804749] loop4: detected capacity change from 0 to 40
[ 2123.807105] loop5: detected capacity change from 0 to 40
[ 2123.808249] loop3: detected capacity change from 0 to 40
12:33:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x0)

[ 2123.830963] syz-executor.1: attempt to access beyond end of device
[ 2123.830963] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
12:33:56 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

[ 2123.888027] loop0: detected capacity change from 0 to 40
[ 2123.893673] loop6: detected capacity change from 0 to 40
12:33:56 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8000)

12:33:56 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2123.979781] loop1: detected capacity change from 0 to 40
[ 2123.985034] syz-executor.2: attempt to access beyond end of device
[ 2123.985034] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2123.986250] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2123.994723] loop7: detected capacity change from 0 to 40
[ 2124.024860] syz-executor.1: attempt to access beyond end of device
[ 2124.024860] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2124.053020] syz-executor.1: attempt to access beyond end of device
[ 2124.053020] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2124.086479] syz-executor.5: attempt to access beyond end of device
[ 2124.086479] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2124.087550] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2124.148532] syz-executor.3: attempt to access beyond end of device
[ 2124.148532] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2124.150152] Buffer I/O error on dev loop3, logical block 10, lost async page write
12:34:08 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:08 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:08 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, 0x0, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2136.125818] loop5: detected capacity change from 0 to 40
[ 2136.127197] loop3: detected capacity change from 0 to 40
12:34:08 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:34:08 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:08 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:34:08 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8000)

[ 2136.143221] loop1: detected capacity change from 0 to 40
[ 2136.162798] loop4: detected capacity change from 0 to 40
[ 2136.172294] syz-executor.1: attempt to access beyond end of device
[ 2136.172294] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2136.176278] loop2: detected capacity change from 0 to 40
[ 2136.192189] loop6: detected capacity change from 0 to 40
[ 2136.197122] loop7: detected capacity change from 0 to 40
12:34:08 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

[ 2136.200376] syz-executor.1: attempt to access beyond end of device
[ 2136.200376] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
12:34:08 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:08 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

[ 2136.262115] loop0: detected capacity change from 0 to 40
[ 2136.285002] syz-executor.3: attempt to access beyond end of device
[ 2136.285002] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2136.286152] Buffer I/O error on dev loop3, logical block 10, lost async page write
12:34:08 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2136.305763] loop1: detected capacity change from 0 to 40
[ 2136.337440] syz-executor.1: attempt to access beyond end of device
[ 2136.337440] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2136.358144] syz-executor.1: attempt to access beyond end of device
[ 2136.358144] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
12:34:08 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:08 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8000)

[ 2136.402661] syz-executor.5: attempt to access beyond end of device
[ 2136.402661] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2136.404398] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2136.430865] loop6: detected capacity change from 0 to 40
[ 2136.433195] loop4: detected capacity change from 0 to 40
[ 2136.438364] loop3: detected capacity change from 0 to 40
12:34:08 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

[ 2136.457268] syz-executor.0: attempt to access beyond end of device
[ 2136.457268] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2136.458441] Buffer I/O error on dev loop0, logical block 10, lost async page write
12:34:08 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2136.496991] loop1: detected capacity change from 0 to 40
[ 2136.533039] loop5: detected capacity change from 0 to 40
[ 2136.551989] syz-executor.1: attempt to access beyond end of device
[ 2136.551989] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2136.554138] loop7: detected capacity change from 0 to 40
12:34:08 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2136.622319] loop0: detected capacity change from 0 to 40
[ 2136.665029] syz-executor.3: attempt to access beyond end of device
[ 2136.665029] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2136.666438] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2136.668068] syz-executor.1: attempt to access beyond end of device
[ 2136.668068] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2136.703039] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2136.735982] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:34:24 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:24 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:24 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000)

12:34:24 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, 0x0, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:24 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, 0x0, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:24 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, 0x0, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:24 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:24 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2151.766962] loop3: detected capacity change from 0 to 40
[ 2151.792135] loop4: detected capacity change from 0 to 40
[ 2151.816977] loop7: detected capacity change from 0 to 40
[ 2151.820047] loop0: detected capacity change from 0 to 40
[ 2151.820390] loop1: detected capacity change from 0 to 40
[ 2151.829019] loop2: detected capacity change from 0 to 40
[ 2151.829533] loop6: detected capacity change from 0 to 40
[ 2151.835690] loop5: detected capacity change from 0 to 40
[ 2151.905791] bio_check_eod: 2 callbacks suppressed
[ 2151.905812] syz-executor.1: attempt to access beyond end of device
[ 2151.905812] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
12:34:24 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:24 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000)

[ 2152.055825] syz-executor.3: attempt to access beyond end of device
[ 2152.055825] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2152.057714] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2152.173764] loop4: detected capacity change from 0 to 40
[ 2152.182163] loop7: detected capacity change from 0 to 40
12:34:24 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2152.298683] syz-executor.1: attempt to access beyond end of device
[ 2152.298683] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
12:34:24 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000)

[ 2152.381733] loop7: detected capacity change from 0 to 40
12:34:24 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, 0x0, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:25 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x0)

[ 2152.681194] loop1: detected capacity change from 0 to 40
12:34:25 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2152.704399] loop7: detected capacity change from 0 to 40
[ 2152.727585] syz-executor.1: attempt to access beyond end of device
[ 2152.727585] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
12:34:25 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, 0x0, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2152.785463] loop4: detected capacity change from 0 to 40
12:34:25 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:34:25 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, 0x0, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:25 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x0)

[ 2152.834727] loop2: detected capacity change from 0 to 40
[ 2152.894163] loop0: detected capacity change from 0 to 40
[ 2152.913912] loop5: detected capacity change from 0 to 40
[ 2152.969065] loop7: detected capacity change from 0 to 40
12:34:25 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2153.056315] loop6: detected capacity change from 0 to 40
12:34:25 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:25 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x0)

[ 2153.186823] loop4: detected capacity change from 0 to 40
12:34:25 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

[ 2153.273223] loop7: detected capacity change from 0 to 40
[ 2153.300472] loop5: detected capacity change from 0 to 40
12:34:25 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2153.460951] loop3: detected capacity change from 0 to 40
12:34:25 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2153.590500] syz-executor.3: attempt to access beyond end of device
[ 2153.590500] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2153.878351] syz-executor.3: attempt to access beyond end of device
[ 2153.878351] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
12:34:38 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:34:38 executing program 6:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:34:38 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, 0x0, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:38 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, 0x0, 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:38 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:38 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:34:38 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180), 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:38 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, 0x0, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2166.066387] loop2: detected capacity change from 0 to 40
[ 2166.066545] loop5: detected capacity change from 0 to 40
[ 2166.068369] loop7: detected capacity change from 0 to 40
[ 2166.074570] loop0: detected capacity change from 0 to 40
[ 2166.076532] loop4: detected capacity change from 0 to 40
[ 2166.087417] loop1: detected capacity change from 0 to 40
[ 2166.094142] loop3: detected capacity change from 0 to 40
[ 2166.112559] syz-executor.1: attempt to access beyond end of device
[ 2166.112559] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2166.139633] syz-executor.1: attempt to access beyond end of device
[ 2166.139633] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
12:34:38 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:38 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:38 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180), 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2166.246607] loop7: detected capacity change from 0 to 40
[ 2166.256826] loop5: detected capacity change from 0 to 40
[ 2166.304371] syz-executor.2: attempt to access beyond end of device
[ 2166.304371] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2166.305374] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2166.320416] syz-executor.7: attempt to access beyond end of device
[ 2166.320416] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2166.348727] loop1: detected capacity change from 0 to 40
[ 2166.358058] syz-executor.7: attempt to access beyond end of device
[ 2166.358058] loop7: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2166.391754] syz-executor.1: attempt to access beyond end of device
[ 2166.391754] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2166.423379] syz-executor.1: attempt to access beyond end of device
[ 2166.423379] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2166.489305] syz-executor.0: attempt to access beyond end of device
[ 2166.489305] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2166.490532] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2179.087296] loop4: detected capacity change from 0 to 40
12:34:51 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180), 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:51 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, 0x0, 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:51 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:51 executing program 6:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:34:51 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:51 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180), 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:51 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', 0x0, 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:51 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

[ 2179.121843] loop2: detected capacity change from 0 to 40
12:34:51 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, 0x0, 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2179.131864] loop0: detected capacity change from 0 to 40
[ 2179.137709] loop3: detected capacity change from 0 to 40
[ 2179.166298] loop5: detected capacity change from 0 to 40
[ 2179.177024] loop1: detected capacity change from 0 to 40
[ 2179.178783] loop7: detected capacity change from 0 to 40
[ 2179.197602] loop4: detected capacity change from 0 to 40
[ 2179.201846] syz-executor.0: attempt to access beyond end of device
[ 2179.201846] loop0: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2179.228100] syz-executor.0: attempt to access beyond end of device
[ 2179.228100] loop0: rw=2049, sector=92, nr_sectors = 4 limit=40
12:34:51 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2179.249247] syz-executor.1: attempt to access beyond end of device
[ 2179.249247] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2179.274659] loop3: detected capacity change from 0 to 40
[ 2179.280116] syz-executor.2: attempt to access beyond end of device
[ 2179.280116] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2179.281207] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:34:51 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:34:51 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180), 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2179.381193] loop0: detected capacity change from 0 to 40
[ 2179.458550] loop2: detected capacity change from 0 to 40
[ 2179.540002] syz-executor.1: attempt to access beyond end of device
[ 2179.540002] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
12:34:51 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180), 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2179.665905] loop1: detected capacity change from 0 to 40
[ 2179.769683] syz-executor.1: attempt to access beyond end of device
[ 2179.769683] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2193.258275] loop0: detected capacity change from 0 to 40
[ 2193.276405] loop5: detected capacity change from 0 to 40
12:35:05 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:05 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:05 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:05 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:05 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:05 executing program 6:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:35:05 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:05 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

[ 2193.279910] loop1: detected capacity change from 0 to 40
[ 2193.283000] loop3: detected capacity change from 0 to 40
[ 2193.284768] loop7: detected capacity change from 0 to 40
[ 2193.287479] loop2: detected capacity change from 0 to 40
[ 2193.298852] loop4: detected capacity change from 0 to 40
[ 2193.313152] syz-executor.1: attempt to access beyond end of device
[ 2193.313152] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2193.344691] syz-executor.1: attempt to access beyond end of device
[ 2193.344691] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
12:35:05 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2193.408682] loop1: detected capacity change from 0 to 40
[ 2193.453948] syz-executor.1: attempt to access beyond end of device
[ 2193.453948] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2193.467830] syz-executor.1: attempt to access beyond end of device
[ 2193.467830] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2193.495156] syz-executor.3: attempt to access beyond end of device
[ 2193.495156] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2193.497138] Buffer I/O error on dev loop3, logical block 10, lost async page write
12:35:06 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2193.697794] loop1: detected capacity change from 0 to 40
[ 2193.733578] syz-executor.1: attempt to access beyond end of device
[ 2193.733578] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2193.751770] syz-executor.0: attempt to access beyond end of device
[ 2193.751770] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2193.753299] Buffer I/O error on dev loop0, logical block 10, lost async page write
12:35:06 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2193.765325] syz-executor.4: attempt to access beyond end of device
[ 2193.765325] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2193.767677] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2193.769472] syz-executor.1: attempt to access beyond end of device
[ 2193.769472] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
12:35:06 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2193.860114] loop3: detected capacity change from 0 to 40
12:35:06 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2193.910082] syz-executor.7: attempt to access beyond end of device
[ 2193.910082] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2193.911543] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2193.932234] loop1: detected capacity change from 0 to 40
12:35:06 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:06 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2194.023257] loop7: detected capacity change from 0 to 40
[ 2194.044944] loop4: detected capacity change from 0 to 40
[ 2194.116871] loop0: detected capacity change from 0 to 40
[ 2194.159978] Buffer I/O error on dev loop7, logical block 10, lost async page write
12:35:06 executing program 6:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2194.275964] loop6: detected capacity change from 0 to 40
[ 2194.375294] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2194.542746] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2209.561100] loop7: detected capacity change from 0 to 40
[ 2209.562116] loop6: detected capacity change from 0 to 40
12:35:21 executing program 6:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:21 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:21 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:21 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:21 executing program 5:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:35:21 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180), 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:21 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000)

12:35:21 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2209.565649] loop3: detected capacity change from 0 to 40
[ 2209.568044] loop2: detected capacity change from 0 to 40
[ 2209.570032] loop1: detected capacity change from 0 to 40
[ 2209.577962] loop4: detected capacity change from 0 to 40
[ 2209.579066] loop0: detected capacity change from 0 to 40
[ 2209.628211] bio_check_eod: 7 callbacks suppressed
[ 2209.628225] syz-executor.7: attempt to access beyond end of device
[ 2209.628225] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2209.637639] syz-executor.1: attempt to access beyond end of device
[ 2209.637639] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2209.647997] syz-executor.0: attempt to access beyond end of device
[ 2209.647997] loop0: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2209.652135] syz-executor.1: attempt to access beyond end of device
[ 2209.652135] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2209.670373] syz-executor.7: attempt to access beyond end of device
[ 2209.670373] loop7: rw=2049, sector=92, nr_sectors = 4 limit=40
12:35:22 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2209.724281] syz-executor.0: attempt to access beyond end of device
[ 2209.724281] loop0: rw=2049, sector=92, nr_sectors = 4 limit=40
12:35:22 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2209.764695] loop3: detected capacity change from 0 to 40
12:35:22 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

[ 2209.801739] syz-executor.4: attempt to access beyond end of device
[ 2209.801739] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2209.803307] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2209.847778] loop1: detected capacity change from 0 to 40
[ 2209.878876] loop7: detected capacity change from 0 to 40
12:35:22 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000)

[ 2209.902852] syz-executor.1: attempt to access beyond end of device
[ 2209.902852] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2209.912191] syz-executor.2: attempt to access beyond end of device
[ 2209.912191] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2209.913731] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2209.919620] syz-executor.1: attempt to access beyond end of device
[ 2209.919620] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
12:35:22 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2209.986281] loop0: detected capacity change from 0 to 40
[ 2210.007185] loop4: detected capacity change from 0 to 40
12:35:22 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2210.036361] Buffer I/O error on dev loop3, logical block 10, lost async page write
12:35:22 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:22 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2210.124566] loop1: detected capacity change from 0 to 40
[ 2210.125274] loop2: detected capacity change from 0 to 40
[ 2210.200251] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2210.246053] loop3: detected capacity change from 0 to 40
[ 2210.252164] perf: interrupt took too long (5469 > 5418), lowering kernel.perf_event_max_sample_rate to 36000
[ 2210.256732] perf: interrupt took too long (10997 > 10933), lowering kernel.perf_event_max_sample_rate to 18000
[ 2210.274126] perf: interrupt took too long (13761 > 13746), lowering kernel.perf_event_max_sample_rate to 14000
[ 2210.287301] perf: interrupt took too long (17203 > 17201), lowering kernel.perf_event_max_sample_rate to 11000
[ 2210.407222] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2210.409847] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2210.437750] Buffer I/O error on dev loop7, logical block 10, lost async page write
12:35:36 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:36 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:36 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:36 executing program 5:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:35:36 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:36 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:36 executing program 6:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:36 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2224.151206] loop1: detected capacity change from 0 to 40
[ 2224.151718] loop3: detected capacity change from 0 to 40
[ 2224.162242] loop0: detected capacity change from 0 to 40
[ 2224.168572] bio_check_eod: 7 callbacks suppressed
[ 2224.168581] syz-executor.1: attempt to access beyond end of device
[ 2224.168581] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2224.202619] loop4: detected capacity change from 0 to 40
[ 2224.205646] loop7: detected capacity change from 0 to 40
[ 2224.211665] loop2: detected capacity change from 0 to 40
[ 2224.214940] loop6: detected capacity change from 0 to 40
[ 2224.257905] syz-executor.3: attempt to access beyond end of device
[ 2224.257905] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2224.259218] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2224.305626] syz-executor.0: attempt to access beyond end of device
[ 2224.305626] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2224.306855] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2224.308919] syz-executor.1: attempt to access beyond end of device
[ 2224.308919] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2224.316695] syz-executor.2: attempt to access beyond end of device
[ 2224.316695] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2224.317723] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2224.359159] syz-executor.7: attempt to access beyond end of device
[ 2224.359159] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2224.360411] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2224.366875] syz-executor.4: attempt to access beyond end of device
[ 2224.366875] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2224.367907] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:35:36 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x0)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:36 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:36 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:36 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, 0x0, &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2224.511735] loop3: detected capacity change from 0 to 40
12:35:36 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2224.537457] loop2: detected capacity change from 0 to 40
[ 2224.542600] loop1: detected capacity change from 0 to 40
12:35:36 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2224.595791] loop0: detected capacity change from 0 to 40
[ 2224.600984] loop4: detected capacity change from 0 to 40
[ 2224.605846] syz-executor.1: attempt to access beyond end of device
[ 2224.605846] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2224.607649] loop7: detected capacity change from 0 to 40
[ 2224.615090] syz-executor.3: attempt to access beyond end of device
[ 2224.615090] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2224.628961] syz-executor.2: attempt to access beyond end of device
[ 2224.628961] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2224.630417] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:35:37 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:35:37 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2224.743883] loop3: detected capacity change from 0 to 40
[ 2224.754889] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2224.757731] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2224.802834] loop2: detected capacity change from 0 to 40
12:35:37 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:37 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, 0x0, &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2224.891225] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2224.924233] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2224.954820] loop7: detected capacity change from 0 to 40
[ 2224.960716] loop1: detected capacity change from 0 to 40
12:35:52 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:52 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:52 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:52 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2240.361604] loop2: detected capacity change from 0 to 40
12:35:52 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:35:52 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2240.369860] loop4: detected capacity change from 0 to 40
[ 2240.374589] loop1: detected capacity change from 0 to 40
[ 2240.374779] loop0: detected capacity change from 0 to 40
[ 2240.380844] loop7: detected capacity change from 0 to 40
12:35:52 executing program 5:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:35:52 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2240.402284] bio_check_eod: 9 callbacks suppressed
[ 2240.402294] syz-executor.1: attempt to access beyond end of device
[ 2240.402294] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2240.421193] loop3: detected capacity change from 0 to 40
[ 2240.426543] loop6: detected capacity change from 0 to 40
[ 2240.437779] syz-executor.1: attempt to access beyond end of device
[ 2240.437779] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2240.453963] syz-executor.0: attempt to access beyond end of device
[ 2240.453963] loop0: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2240.467843] syz-executor.7: attempt to access beyond end of device
[ 2240.467843] loop7: rw=2049, sector=92, nr_sectors = 4 limit=40
12:35:52 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2240.517143] syz-executor.4: attempt to access beyond end of device
[ 2240.517143] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2240.518295] buffer_io_error: 1 callbacks suppressed
[ 2240.518302] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2240.528960] syz-executor.2: attempt to access beyond end of device
[ 2240.528960] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2240.530891] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:35:52 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:35:52 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2240.576117] loop1: detected capacity change from 0 to 40
[ 2240.592139] loop0: detected capacity change from 0 to 40
[ 2240.609474] syz-executor.1: attempt to access beyond end of device
12:35:53 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2240.609474] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2240.617507] syz-executor.1: attempt to access beyond end of device
[ 2240.617507] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2240.661630] syz-executor.0: attempt to access beyond end of device
[ 2240.661630] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2240.662793] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2240.672231] syz-executor.3: attempt to access beyond end of device
[ 2240.672231] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2240.674060] Buffer I/O error on dev loop3, logical block 10, lost async page write
12:35:53 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2240.728666] loop1: detected capacity change from 0 to 40
[ 2240.780908] loop7: detected capacity change from 0 to 40
[ 2240.786913] loop4: detected capacity change from 0 to 40
[ 2240.981069] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2241.306143] syz-executor.6 (10842) used greatest stack depth: 22640 bytes left
12:36:07 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:07 executing program 5:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:07 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:07 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:07 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:07 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:07 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:07 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2254.757754] loop1: detected capacity change from 0 to 40
[ 2254.758658] loop2: detected capacity change from 0 to 40
[ 2254.761637] loop0: detected capacity change from 0 to 40
[ 2254.764156] loop3: detected capacity change from 0 to 40
[ 2254.765632] loop4: detected capacity change from 0 to 40
[ 2254.767814] loop6: detected capacity change from 0 to 40
[ 2254.782260] loop5: detected capacity change from 0 to 40
[ 2254.800540] bio_check_eod: 4 callbacks suppressed
[ 2254.800551] syz-executor.1: attempt to access beyond end of device
[ 2254.800551] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2254.804018] loop7: detected capacity change from 0 to 40
[ 2254.858024] syz-executor.1: attempt to access beyond end of device
[ 2254.858024] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2254.866853] syz-executor.3: attempt to access beyond end of device
[ 2254.866853] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
12:36:07 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2254.986625] loop0: detected capacity change from 0 to 40
[ 2254.997315] syz-executor.4: attempt to access beyond end of device
[ 2254.997315] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2254.999499] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2255.071146] perf: interrupt took too long (21548 > 21503), lowering kernel.perf_event_max_sample_rate to 9000
12:36:07 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:36:07 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:07 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(0x0, 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:07 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2255.308695] syz-executor.0: attempt to access beyond end of device
[ 2255.308695] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2255.311223] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2255.359380] loop3: detected capacity change from 0 to 40
[ 2255.367668] loop1: detected capacity change from 0 to 40
[ 2255.401229] syz-executor.2: attempt to access beyond end of device
[ 2255.401229] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2255.403947] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2255.437530] syz-executor.1: attempt to access beyond end of device
[ 2255.437530] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
12:36:07 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2255.449931] loop7: detected capacity change from 0 to 40
[ 2255.452145] syz-executor.1: attempt to access beyond end of device
[ 2255.452145] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2255.499993] loop0: detected capacity change from 0 to 40
[ 2255.545056] loop4: detected capacity change from 0 to 40
[ 2255.549981] FAT-fs (loop0): bogus number of FAT sectors
[ 2255.551025] FAT-fs (loop0): Can't find a valid FAT filesystem
[ 2255.553868] syz-executor.3: attempt to access beyond end of device
[ 2255.553868] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2255.556077] Buffer I/O error on dev loop3, logical block 10, lost async page write
12:36:08 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:08 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2255.671113] syz-executor.7: attempt to access beyond end of device
[ 2255.671113] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2255.672940] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2255.679973] loop1: detected capacity change from 0 to 40
12:36:08 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2255.776265] loop6: detected capacity change from 0 to 40
[ 2255.787597] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:36:08 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(0x0, 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2255.820491] loop2: detected capacity change from 0 to 40
12:36:08 executing program 5:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:08 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2255.909125] loop7: detected capacity change from 0 to 40
12:36:08 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2255.926221] loop5: detected capacity change from 0 to 40
[ 2255.968031] loop3: detected capacity change from 0 to 40
[ 2255.980134] loop1: detected capacity change from 0 to 40
[ 2255.984760] FAT-fs (loop3): invalid media value (0x00)
[ 2255.985852] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2256.057882] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2256.116677] Buffer I/O error on dev loop7, logical block 10, lost async page write
12:36:22 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:22 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2270.244701] loop7: detected capacity change from 0 to 40
[ 2270.246597] loop5: detected capacity change from 0 to 40
12:36:22 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:22 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:22 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:22 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:22 executing program 5:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:22 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2270.295805] loop0: detected capacity change from 0 to 40
[ 2270.296426] loop4: detected capacity change from 0 to 40
[ 2270.297531] loop2: detected capacity change from 0 to 40
[ 2270.300172] loop3: detected capacity change from 0 to 40
[ 2270.302417] loop1: detected capacity change from 0 to 40
[ 2270.364141] bio_check_eod: 7 callbacks suppressed
[ 2270.364153] syz-executor.2: attempt to access beyond end of device
[ 2270.364153] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2270.365487] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2270.390493] syz-executor.7: attempt to access beyond end of device
[ 2270.390493] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2270.391508] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2270.400469] syz-executor.4: attempt to access beyond end of device
[ 2270.400469] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2270.401850] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2270.406590] syz-executor.1: attempt to access beyond end of device
[ 2270.406590] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2270.442229] syz-executor.0: attempt to access beyond end of device
[ 2270.442229] loop0: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2270.479812] syz-executor.1: attempt to access beyond end of device
[ 2270.479812] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2270.491698] syz-executor.0: attempt to access beyond end of device
[ 2270.491698] loop0: rw=2049, sector=92, nr_sectors = 4 limit=40
12:36:22 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:22 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
syncfs(0xffffffffffffffff)

12:36:22 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2270.600050] loop7: detected capacity change from 0 to 40
[ 2270.603106] loop2: detected capacity change from 0 to 40
12:36:22 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:23 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2270.651219] loop4: detected capacity change from 0 to 40
[ 2270.663941] loop1: detected capacity change from 0 to 40
[ 2270.707102] syz-executor.2: attempt to access beyond end of device
[ 2270.707102] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2270.708014] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2270.708861] loop0: detected capacity change from 0 to 40
[ 2270.727011] syz-executor.1: attempt to access beyond end of device
[ 2270.727011] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2270.745859] syz-executor.1: attempt to access beyond end of device
[ 2270.745859] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2270.754308] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2270.788856] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2270.796893] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:36:23 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:23 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:23 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:23 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:23 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
syncfs(0xffffffffffffffff)

[ 2270.942205] loop1: detected capacity change from 0 to 40
[ 2270.943256] loop2: detected capacity change from 0 to 40
[ 2270.967853] loop0: detected capacity change from 0 to 40
[ 2270.971176] loop4: detected capacity change from 0 to 40
[ 2271.027530] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2271.040222] loop7: detected capacity change from 0 to 40
12:36:23 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2271.119046] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2271.121743] Buffer I/O error on dev loop0, logical block 10, lost async page write
12:36:23 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:23 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:23 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2271.251232] loop2: detected capacity change from 0 to 40
12:36:23 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
syncfs(0xffffffffffffffff)

[ 2271.309824] loop5: detected capacity change from 0 to 40
[ 2271.319085] loop1: detected capacity change from 0 to 40
[ 2271.347224] loop0: detected capacity change from 0 to 40
12:36:38 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:38 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:38 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2286.053385] loop7: detected capacity change from 0 to 40
12:36:38 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:38 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:38 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:38 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:38 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2286.076380] loop4: detected capacity change from 0 to 40
[ 2286.077223] loop2: detected capacity change from 0 to 40
[ 2286.095948] loop3: detected capacity change from 0 to 40
[ 2286.109602] loop0: detected capacity change from 0 to 40
[ 2286.115867] bio_check_eod: 13 callbacks suppressed
[ 2286.115878] syz-executor.7: attempt to access beyond end of device
[ 2286.115878] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2286.116969] loop5: detected capacity change from 0 to 40
[ 2286.117319] buffer_io_error: 3 callbacks suppressed
[ 2286.117346] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2286.129027] loop1: detected capacity change from 0 to 40
[ 2286.140197] syz-executor.2: attempt to access beyond end of device
[ 2286.140197] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2286.141224] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2286.179772] syz-executor.3: attempt to access beyond end of device
[ 2286.179772] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2286.180982] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2286.210559] syz-executor.4: attempt to access beyond end of device
[ 2286.210559] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2286.211825] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2286.212856] syz-executor.1: attempt to access beyond end of device
[ 2286.212856] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
12:36:38 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:38 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2286.260958] syz-executor.0: attempt to access beyond end of device
[ 2286.260958] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2286.261983] Buffer I/O error on dev loop0, logical block 10, lost async page write
12:36:38 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:38 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2286.362986] loop1: detected capacity change from 0 to 40
[ 2286.364882] loop2: detected capacity change from 0 to 40
12:36:38 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:38 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)

[ 2286.423575] loop4: detected capacity change from 0 to 40
[ 2286.438453] loop3: detected capacity change from 0 to 40
[ 2286.456693] syz-executor.1: attempt to access beyond end of device
[ 2286.456693] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2286.496085] loop0: detected capacity change from 0 to 40
[ 2286.546864] syz-executor.2: attempt to access beyond end of device
[ 2286.546864] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2286.548954] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:36:39 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2286.707204] syz-executor.3: attempt to access beyond end of device
[ 2286.707204] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2286.709846] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2286.717496] syz-executor.4: attempt to access beyond end of device
[ 2286.717496] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2286.719810] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2286.747790] loop1: detected capacity change from 0 to 40
[ 2286.772217] Buffer I/O error on dev loop0, logical block 10, lost async page write
12:36:39 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2286.892123] loop2: detected capacity change from 0 to 40
[ 2287.153222] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:36:53 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:53 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:53 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:53 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:53 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:53 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:53 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:36:53 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2301.255508] loop1: detected capacity change from 0 to 40
[ 2301.268311] bio_check_eod: 3 callbacks suppressed
[ 2301.268734] syz-executor.1: attempt to access beyond end of device
[ 2301.268734] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2301.270887] loop5: detected capacity change from 0 to 40
[ 2301.272697] loop3: detected capacity change from 0 to 40
[ 2301.275856] loop7: detected capacity change from 0 to 40
[ 2301.277675] loop4: detected capacity change from 0 to 40
[ 2301.305673] FAT-fs (loop6): bogus number of reserved sectors
[ 2301.306165] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2301.309015] loop2: detected capacity change from 0 to 40
[ 2301.320097] loop0: detected capacity change from 0 to 40
[ 2301.362230] syz-executor.3: attempt to access beyond end of device
[ 2301.362230] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2301.363609] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2301.446033] syz-executor.4: attempt to access beyond end of device
[ 2301.446033] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2301.447885] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2301.449600] syz-executor.2: attempt to access beyond end of device
[ 2301.449600] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2301.451661] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2301.543778] syz-executor.0: attempt to access beyond end of device
[ 2301.543778] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2301.545633] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2301.593580] syz-executor.7: attempt to access beyond end of device
[ 2301.593580] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2301.595683] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2316.513611] loop4: detected capacity change from 0 to 40
12:37:08 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:08 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:08 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:08 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:08 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:08 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:08 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:08 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
truncate(&(0x7f0000000040)='./file1\x00', 0x0)

[ 2316.532567] loop1: detected capacity change from 0 to 40
[ 2316.546169] syz-executor.1: attempt to access beyond end of device
[ 2316.546169] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2316.549606] loop7: detected capacity change from 0 to 40
[ 2316.558728] syz-executor.4: attempt to access beyond end of device
[ 2316.558728] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2316.559836] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2316.569211] loop3: detected capacity change from 0 to 40
[ 2316.572968] FAT-fs (loop3): invalid media value (0x00)
[ 2316.573392] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2316.578198] loop0: detected capacity change from 0 to 40
[ 2316.582507] FAT-fs (loop0): bogus number of reserved sectors
[ 2316.582955] FAT-fs (loop0): Can't find a valid FAT filesystem
[ 2316.598069] loop2: detected capacity change from 0 to 40
[ 2316.607057] FAT-fs (loop6): bogus number of reserved sectors
12:37:09 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2316.608021] FAT-fs (loop6): Can't find a valid FAT filesystem
12:37:09 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2316.680025] syz-executor.7: attempt to access beyond end of device
[ 2316.680025] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2316.681071] Buffer I/O error on dev loop7, logical block 10, lost async page write
12:37:09 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2316.786999] loop4: detected capacity change from 0 to 40
[ 2316.832453] loop1: detected capacity change from 0 to 40
[ 2316.835816] syz-executor.2: attempt to access beyond end of device
[ 2316.835816] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2316.837096] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2316.841550] loop3: detected capacity change from 0 to 40
12:37:09 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2316.849341] syz-executor.1: attempt to access beyond end of device
[ 2316.849341] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2316.888764] syz-executor.4: attempt to access beyond end of device
[ 2316.888764] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2316.890841] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2316.948190] loop7: detected capacity change from 0 to 40
[ 2317.033199] syz-executor.3: attempt to access beyond end of device
[ 2317.033199] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2317.035007] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2317.117618] syz-executor.7: attempt to access beyond end of device
[ 2317.117618] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2329.551182] loop0: detected capacity change from 0 to 40
[ 2329.558819] loop7: detected capacity change from 0 to 40
12:37:21 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x0)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:21 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:21 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
syncfs(0xffffffffffffffff)

12:37:21 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:21 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:21 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:21 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:21 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2329.575610] loop2: detected capacity change from 0 to 40
[ 2329.577309] FAT-fs (loop7): bogus number of reserved sectors
[ 2329.578366] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2329.588477] FAT-fs (loop6): bogus number of reserved sectors
[ 2329.588786] loop1: detected capacity change from 0 to 40
[ 2329.589279] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2329.594814] loop4: detected capacity change from 0 to 40
[ 2329.607311] loop3: detected capacity change from 0 to 40
[ 2329.686176] syz-executor.1: attempt to access beyond end of device
[ 2329.686176] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2329.729707] syz-executor.4: attempt to access beyond end of device
[ 2329.729707] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2329.731879] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2329.747701] syz-executor.2: attempt to access beyond end of device
[ 2329.747701] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2329.750175] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2329.848914] syz-executor.0: attempt to access beyond end of device
[ 2329.848914] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2329.851065] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2329.857992] syz-executor.3: attempt to access beyond end of device
[ 2329.857992] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2329.859962] Buffer I/O error on dev loop3, logical block 10, lost async page write
12:37:22 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x0)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:22 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:22 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2329.914849] loop4: detected capacity change from 0 to 40
[ 2329.996898] syz-executor.4: attempt to access beyond end of device
[ 2329.996898] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2329.998697] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:37:22 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:22 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x0)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:22 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)

[ 2330.116750] loop2: detected capacity change from 0 to 40
[ 2330.117988] loop4: detected capacity change from 0 to 40
[ 2330.129749] loop1: detected capacity change from 0 to 40
[ 2330.165504] loop0: detected capacity change from 0 to 40
[ 2330.208835] syz-executor.4: attempt to access beyond end of device
[ 2330.208835] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2330.210690] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2330.232221] syz-executor.1: attempt to access beyond end of device
[ 2330.232221] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2330.287514] syz-executor.2: attempt to access beyond end of device
[ 2330.287514] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2330.289453] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2330.300698] loop3: detected capacity change from 0 to 40
[ 2330.416829] syz-executor.0: attempt to access beyond end of device
[ 2330.416829] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2330.418678] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2330.460669] Buffer I/O error on dev loop3, logical block 10, lost async page write
12:37:37 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:37 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:37 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)

12:37:37 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:37 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:37 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:37 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2344.973979] loop4: detected capacity change from 0 to 40
[ 2344.974226] loop7: detected capacity change from 0 to 40
12:37:37 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2344.981059] loop2: detected capacity change from 0 to 40
[ 2344.990759] loop3: detected capacity change from 0 to 40
[ 2345.011161] bio_check_eod: 1 callbacks suppressed
[ 2345.011172] syz-executor.7: attempt to access beyond end of device
[ 2345.011172] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2345.039694] loop0: detected capacity change from 0 to 40
[ 2345.042167] loop1: detected capacity change from 0 to 40
[ 2345.051050] FAT-fs (loop6): bogus number of reserved sectors
[ 2345.051941] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2345.057701] syz-executor.2: attempt to access beyond end of device
[ 2345.057701] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2345.058762] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2345.061281] FAT-fs (loop0): bogus number of reserved sectors
[ 2345.062316] FAT-fs (loop0): Can't find a valid FAT filesystem
12:37:37 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(0x0, 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2345.123674] syz-executor.4: attempt to access beyond end of device
[ 2345.123674] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2345.125490] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2345.136942] syz-executor.1: attempt to access beyond end of device
[ 2345.136942] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2345.168312] loop7: detected capacity change from 0 to 40
12:37:37 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2345.254940] loop2: detected capacity change from 0 to 40
[ 2345.261170] syz-executor.3: attempt to access beyond end of device
[ 2345.261170] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2345.263094] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2345.266056] syz-executor.7: attempt to access beyond end of device
[ 2345.266056] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2345.297013] syz-executor.7: attempt to access beyond end of device
[ 2345.297013] loop7: rw=2049, sector=92, nr_sectors = 4 limit=40
12:37:37 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:37 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:37 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:37 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r1, 0x0, 0x8000)

[ 2345.441245] loop2: detected capacity change from 0 to 40
[ 2345.489700] loop7: detected capacity change from 0 to 40
[ 2345.509439] FAT-fs (loop7): bogus number of reserved sectors
[ 2345.510239] FAT-fs (loop7): Can't find a valid FAT filesystem
12:37:37 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2345.558844] loop4: detected capacity change from 0 to 40
12:37:37 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2345.631462] loop1: detected capacity change from 0 to 40
12:37:38 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2345.666290] loop2: detected capacity change from 0 to 40
[ 2345.719208] loop3: detected capacity change from 0 to 40
[ 2345.747680] FAT-fs (loop3): invalid media value (0x00)
[ 2345.748763] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2345.750980] syz-executor.1: attempt to access beyond end of device
[ 2345.750980] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2345.805729] syz-executor.1: attempt to access beyond end of device
[ 2345.805729] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2345.809120] syz-executor.4: attempt to access beyond end of device
[ 2345.809120] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2345.811276] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:37:38 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2345.855319] loop7: detected capacity change from 0 to 40
[ 2345.870534] loop2: detected capacity change from 0 to 40
12:37:38 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2346.071226] Buffer I/O error on dev loop7, logical block 10, lost async page write
12:37:38 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:38 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2346.162819] loop1: detected capacity change from 0 to 40
12:37:38 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:38 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:38 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2346.194110] loop2: detected capacity change from 0 to 40
[ 2346.211977] loop4: detected capacity change from 0 to 40
[ 2346.237673] FAT-fs (loop5): bogus number of reserved sectors
[ 2346.238541] FAT-fs (loop5): Can't find a valid FAT filesystem
12:37:38 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2346.308673] loop0: detected capacity change from 0 to 40
[ 2346.337227] FAT-fs (loop6): bogus number of reserved sectors
[ 2346.338144] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2346.346946] loop7: detected capacity change from 0 to 40
[ 2346.348310] FAT-fs (loop0): bogus number of reserved sectors
[ 2346.349217] FAT-fs (loop0): Can't find a valid FAT filesystem
12:37:38 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2346.452901] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:37:38 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2346.554885] loop2: detected capacity change from 0 to 40
12:37:38 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, 0x0, &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2346.616793] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2346.637193] loop1: detected capacity change from 0 to 40
[ 2346.677275] loop4: detected capacity change from 0 to 40
12:37:39 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:39 executing program 7:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2346.790197] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2346.900787] loop2: detected capacity change from 0 to 40
[ 2346.932651] loop7: detected capacity change from 0 to 40
[ 2362.020546] loop7: detected capacity change from 0 to 40
12:37:54 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:54 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
sendfile(r1, r0, 0x0, 0xfffffdef)

12:37:54 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:54 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:54 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:54 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:54 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, 0x0, &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:54 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syncfs(r4)

[ 2362.047801] FAT-fs (loop7): bogus number of reserved sectors
[ 2362.048268] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2362.051853] loop0: detected capacity change from 0 to 40
[ 2362.056233] FAT-fs (loop3): bogus number of reserved sectors
[ 2362.056510] loop2: detected capacity change from 0 to 40
[ 2362.056732] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2362.060277] FAT-fs (loop5): bogus number of reserved sectors
[ 2362.061227] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2362.083092] loop1: detected capacity change from 0 to 40
[ 2362.090663] loop4: detected capacity change from 0 to 40
[ 2362.104790] FAT-fs (loop6): bogus number of reserved sectors
[ 2362.105762] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2362.131934] bio_check_eod: 8 callbacks suppressed
[ 2362.131945] syz-executor.1: attempt to access beyond end of device
[ 2362.131945] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2362.160622] syz-executor.1: attempt to access beyond end of device
[ 2362.160622] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2362.173691] syz-executor.0: attempt to access beyond end of device
[ 2362.173691] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2362.175065] Buffer I/O error on dev loop0, logical block 10, lost async page write
12:37:54 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:54 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2362.260588] loop2: detected capacity change from 0 to 40
[ 2362.261693] syz-executor.4: attempt to access beyond end of device
[ 2362.261693] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2362.263605] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2362.287447] loop0: detected capacity change from 0 to 40
[ 2362.292037] FAT-fs (loop0): bogus number of reserved sectors
[ 2362.292527] FAT-fs (loop0): Can't find a valid FAT filesystem
12:37:54 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:54 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syncfs(r4)

12:37:54 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, 0x0, &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2362.474401] loop1: detected capacity change from 0 to 40
[ 2362.501057] syz-executor.1: attempt to access beyond end of device
[ 2362.501057] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2362.518031] loop2: detected capacity change from 0 to 40
[ 2362.527033] syz-executor.1: attempt to access beyond end of device
[ 2362.527033] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2362.631627] loop4: detected capacity change from 0 to 40
[ 2362.728815] syz-executor.2: attempt to access beyond end of device
[ 2362.728815] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2362.730687] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:37:55 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syncfs(r4)

[ 2362.811647] syz-executor.4: attempt to access beyond end of device
[ 2362.811647] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2362.813818] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2362.902083] loop1: detected capacity change from 0 to 40
12:37:55 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:37:55 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', 0x0, 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2362.996150] loop2: detected capacity change from 0 to 40
[ 2363.008825] syz-executor.1: attempt to access beyond end of device
[ 2363.008825] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2363.044729] syz-executor.1: attempt to access beyond end of device
[ 2363.044729] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2363.089792] loop4: detected capacity change from 0 to 40
[ 2363.220039] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2363.260002] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2376.568180] loop1: detected capacity change from 0 to 40
[ 2376.579282] loop4: detected capacity change from 0 to 40
12:38:08 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:38:08 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:38:08 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(0xffffffffffffffff)

12:38:08 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syncfs(r4)

12:38:08 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', 0x0, 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:38:08 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:38:08 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
syncfs(0xffffffffffffffff)

12:38:08 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2376.596687] loop2: detected capacity change from 0 to 40
[ 2376.599109] loop3: detected capacity change from 0 to 40
[ 2376.610649] bio_check_eod: 2 callbacks suppressed
[ 2376.610659] syz-executor.4: attempt to access beyond end of device
[ 2376.610659] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2376.612155] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2376.636592] loop6: detected capacity change from 0 to 40
[ 2376.638917] FAT-fs (loop6): bogus number of reserved sectors
[ 2376.639398] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2376.641087] syz-executor.3: attempt to access beyond end of device
[ 2376.641087] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2376.643510] loop0: detected capacity change from 0 to 40
[ 2376.647553] loop7: detected capacity change from 0 to 40
[ 2376.653248] FAT-fs (loop5): bogus number of reserved sectors
[ 2376.654233] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2376.658638] syz-executor.3: attempt to access beyond end of device
[ 2376.658638] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2376.669270] FAT-fs (loop7): bogus number of reserved sectors
[ 2376.670286] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2376.674302] syz-executor.1: attempt to access beyond end of device
[ 2376.674302] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
12:38:09 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', 0x0, 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2376.709029] syz-executor.1: attempt to access beyond end of device
[ 2376.709029] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
12:38:09 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2376.751662] loop4: detected capacity change from 0 to 40
[ 2376.772190] loop3: detected capacity change from 0 to 40
[ 2376.775114] syz-executor.2: attempt to access beyond end of device
[ 2376.775114] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2376.777470] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2376.788110] FAT-fs (loop3): bogus number of reserved sectors
[ 2376.788600] FAT-fs (loop3): Can't find a valid FAT filesystem
12:38:09 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 2376.835316] syz-executor.4: attempt to access beyond end of device
[ 2376.835316] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2376.836616] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2376.876709] syz-executor.0: attempt to access beyond end of device
[ 2376.876709] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2376.878783] Buffer I/O error on dev loop0, logical block 10, lost async page write
12:38:09 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:38:09 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syncfs(r4)

[ 2377.025018] loop1: detected capacity change from 0 to 40
[ 2377.066104] loop4: detected capacity change from 0 to 40
12:38:09 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', 0x0, 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2377.145774] syz-executor.4: attempt to access beyond end of device
[ 2377.145774] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2377.147594] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2377.151737] syz-executor.1: attempt to access beyond end of device
[ 2377.151737] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2377.187504] loop2: detected capacity change from 0 to 40
[ 2377.280927] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:38:09 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2377.325182] loop0: detected capacity change from 0 to 40
12:38:09 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syncfs(r4)

[ 2377.434530] loop4: detected capacity change from 0 to 40
[ 2377.472791] loop2: detected capacity change from 0 to 40
[ 2377.544692] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2377.560701] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2377.608601] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:38:23 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:38:23 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:38:23 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(0xffffffffffffffff)

12:38:23 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2391.191572] loop4: detected capacity change from 0 to 40
[ 2391.194640] loop6: detected capacity change from 0 to 40
[ 2391.198387] FAT-fs (loop6): bogus number of reserved sectors
[ 2391.198984] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2391.200024] loop1: detected capacity change from 0 to 40
12:38:23 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:38:23 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syncfs(r4)

12:38:23 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(0xffffffffffffffff)

12:38:23 executing program 3:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

[ 2391.217805] FAT-fs (loop5): bogus number of reserved sectors
[ 2391.218851] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2391.220769] loop7: detected capacity change from 0 to 40
[ 2391.235817] loop0: detected capacity change from 0 to 40
[ 2391.243816] bio_check_eod: 5 callbacks suppressed
[ 2391.243826] syz-executor.1: attempt to access beyond end of device
[ 2391.243826] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2391.259716] loop2: detected capacity change from 0 to 40
[ 2391.261024] syz-executor.1: attempt to access beyond end of device
[ 2391.261024] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2391.272016] syz-executor.4: attempt to access beyond end of device
[ 2391.272016] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2391.273446] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2391.327109] syz-executor.7: attempt to access beyond end of device
[ 2391.327109] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2391.344094] syz-executor.7: attempt to access beyond end of device
[ 2391.344094] loop7: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2391.380975] syz-executor.2: attempt to access beyond end of device
[ 2391.380975] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2391.381926] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2391.392805] syz-executor.0: attempt to access beyond end of device
[ 2391.392805] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2391.393753] Buffer I/O error on dev loop0, logical block 10, lost async page write
12:38:23 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:38:23 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(0xffffffffffffffff)

12:38:23 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 2391.525149] loop4: detected capacity change from 0 to 40
[ 2391.544867] loop2: detected capacity change from 0 to 40
12:38:23 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(0xffffffffffffffff)

12:38:23 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
syncfs(0xffffffffffffffff)

[ 2391.575795] loop7: detected capacity change from 0 to 40
[ 2391.577242] loop1: detected capacity change from 0 to 40
[ 2391.631238] syz-executor.7: attempt to access beyond end of device
[ 2391.631238] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2391.675805] loop0: detected capacity change from 0 to 40
[ 2391.678637] syz-executor.7: attempt to access beyond end of device
[ 2391.678637] loop7: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2391.725272] syz-executor.4: attempt to access beyond end of device
[ 2391.725272] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2391.727484] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2391.731817] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2391.751932] Buffer I/O error on dev loop1, logical block 10, lost async page write
12:38:24 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:38:24 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:38:24 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2391.993636] loop1: detected capacity change from 0 to 40
[ 2391.997899] loop7: detected capacity change from 0 to 40
[ 2392.019978] FAT-fs (loop7): bogus number of reserved sectors
[ 2392.020839] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2392.022189] loop4: detected capacity change from 0 to 40
[ 2392.193061] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2404.884046] loop2: detected capacity change from 0 to 40
[ 2404.885180] loop3: detected capacity change from 0 to 40
[ 2404.898628] loop4: detected capacity change from 0 to 40
12:38:37 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:38:37 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:38:37 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(0xffffffffffffffff)

12:38:37 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)

12:38:37 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:38:37 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:38:37 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2404.901414] FAT-fs (loop5): bogus number of reserved sectors
[ 2404.901870] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2404.906075] FAT-fs (loop3): bogus number of reserved sectors
[ 2404.906584] FAT-fs (loop3): Can't find a valid FAT filesystem
12:38:37 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2404.940746] loop7: detected capacity change from 0 to 40
[ 2404.952810] loop6: detected capacity change from 0 to 40
[ 2404.958265] loop0: detected capacity change from 0 to 40
[ 2404.989013] loop1: detected capacity change from 0 to 40
[ 2404.989484] FAT-fs (loop6): bogus number of reserved sectors
[ 2404.991095] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2405.002789] bio_check_eod: 5 callbacks suppressed
[ 2405.002871] syz-executor.4: attempt to access beyond end of device
[ 2405.002871] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2405.005666] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2405.094009] syz-executor.2: attempt to access beyond end of device
[ 2405.094009] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2405.096699] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2405.136261] syz-executor.1: attempt to access beyond end of device
[ 2405.136261] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2405.137508] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2405.252832] syz-executor.0: attempt to access beyond end of device
[ 2405.252832] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2405.254743] Buffer I/O error on dev loop0, logical block 10, lost async page write
12:38:52 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:38:52 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:38:52 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:38:52 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2420.013123] loop3: detected capacity change from 0 to 40
[ 2420.015055] loop6: detected capacity change from 0 to 40
12:38:52 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:38:52 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(0xffffffffffffffff)

12:38:52 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:38:52 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2420.032383] FAT-fs (loop6): bogus number of reserved sectors
[ 2420.033020] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2420.046418] FAT-fs (loop5): bogus number of reserved sectors
[ 2420.047030] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2420.066651] loop1: detected capacity change from 0 to 40
[ 2420.067974] loop4: detected capacity change from 0 to 40
[ 2420.070231] loop0: detected capacity change from 0 to 40
[ 2420.073015] FAT-fs (loop7): bogus number of reserved sectors
[ 2420.073695] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2420.078811] loop2: detected capacity change from 0 to 40
[ 2420.248513] syz-executor.4: attempt to access beyond end of device
[ 2420.248513] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2420.249882] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2420.250583] syz-executor.3: attempt to access beyond end of device
[ 2420.250583] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2420.252566] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2420.273224] syz-executor.2: attempt to access beyond end of device
[ 2420.273224] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2420.274749] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2420.290259] syz-executor.1: attempt to access beyond end of device
[ 2420.290259] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2420.291733] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2420.319893] syz-executor.0: attempt to access beyond end of device
[ 2420.319893] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2420.321488] Buffer I/O error on dev loop0, logical block 10, lost async page write
12:38:52 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:38:52 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:38:52 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:38:52 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

[ 2420.509038] loop3: detected capacity change from 0 to 40
[ 2420.533560] loop4: detected capacity change from 0 to 40
[ 2420.567423] FAT-fs (loop1): bogus number of reserved sectors
[ 2420.568006] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2420.604760] loop0: detected capacity change from 0 to 40
[ 2420.651716] syz-executor.4: attempt to access beyond end of device
[ 2420.651716] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2420.653567] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:38:53 executing program 2:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2420.768657] loop2: detected capacity change from 0 to 40
[ 2420.842625] syz-executor.0: attempt to access beyond end of device
[ 2420.842625] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2420.844874] Buffer I/O error on dev loop0, logical block 10, lost async page write
12:39:07 executing program 2:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:39:07 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

12:39:07 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2434.929160] loop5: detected capacity change from 0 to 40
[ 2434.935289] loop6: detected capacity change from 0 to 40
[ 2434.940645] loop1: detected capacity change from 0 to 40
[ 2434.942543] loop7: detected capacity change from 0 to 40
[ 2434.953538] FAT-fs (loop6): bogus number of reserved sectors
[ 2434.954503] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2434.955461] loop0: detected capacity change from 0 to 40
[ 2434.958125] FAT-fs (loop5): bogus number of reserved sectors
12:39:07 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:39:07 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:39:07 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:39:07 executing program 7:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:39:07 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

[ 2434.959229] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2434.968465] loop4: detected capacity change from 0 to 40
[ 2434.971563] loop3: detected capacity change from 0 to 40
[ 2435.048955] syz-executor.4: attempt to access beyond end of device
[ 2435.048955] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2435.050096] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2435.058389] syz-executor.3: attempt to access beyond end of device
[ 2435.058389] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2435.059399] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2435.101043] syz-executor.0: attempt to access beyond end of device
[ 2435.101043] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2435.102071] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2435.106789] syz-executor.1: attempt to access beyond end of device
[ 2435.106789] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2435.107900] Buffer I/O error on dev loop1, logical block 10, lost async page write
12:39:07 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:39:07 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, 0x0, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:39:07 executing program 0:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:39:07 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

[ 2435.290078] loop4: detected capacity change from 0 to 40
[ 2435.298968] loop1: detected capacity change from 0 to 40
[ 2435.308655] loop3: detected capacity change from 0 to 40
[ 2435.420794] syz-executor.4: attempt to access beyond end of device
[ 2435.420794] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2435.421968] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2435.425249] syz-executor.1: attempt to access beyond end of device
[ 2435.425249] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2435.426564] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2435.458727] syz-executor.3: attempt to access beyond end of device
[ 2435.458727] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2435.460152] Buffer I/O error on dev loop3, logical block 10, lost async page write
12:39:07 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, 0x0, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2435.580019] loop4: detected capacity change from 0 to 40
[ 2435.800156] syz-executor.4: attempt to access beyond end of device
[ 2435.800156] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2435.801290] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:39:21 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:39:21 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
sendfile(r1, r0, 0x0, 0xfffffdef)

12:39:21 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, 0x0, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:39:21 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:39:21 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:39:21 executing program 2:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:39:21 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:39:21 executing program 3:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

[ 2449.458492] FAT-fs (loop0): bogus number of reserved sectors
[ 2449.459157] FAT-fs (loop0): Can't find a valid FAT filesystem
[ 2449.460806] loop4: detected capacity change from 0 to 40
[ 2449.462055] loop6: detected capacity change from 0 to 40
[ 2449.464971] FAT-fs (loop6): bogus number of reserved sectors
[ 2449.465685] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2449.497012] loop7: detected capacity change from 0 to 40
[ 2449.516918] loop1: detected capacity change from 0 to 40
[ 2449.521948] loop5: detected capacity change from 0 to 40
[ 2449.558248] FAT-fs (loop5): bogus number of reserved sectors
[ 2449.559084] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2449.611572] syz-executor.4: attempt to access beyond end of device
[ 2449.611572] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2449.612834] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:39:22 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180), 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2449.735951] syz-executor.1: attempt to access beyond end of device
[ 2449.735951] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2449.737195] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2449.800651] loop4: detected capacity change from 0 to 40
12:39:22 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2450.006301] syz-executor.4: attempt to access beyond end of device
[ 2450.006301] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2450.008362] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:39:22 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180), 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2450.238440] loop1: detected capacity change from 0 to 40
[ 2450.378284] loop4: detected capacity change from 0 to 40
12:39:22 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:39:22 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2450.576084] loop5: detected capacity change from 0 to 40
[ 2450.586757] loop6: detected capacity change from 0 to 40
[ 2450.591479] FAT-fs (loop5): bogus number of reserved sectors
[ 2450.592303] FAT-fs (loop5): Can't find a valid FAT filesystem
12:39:23 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2450.609925] syz-executor.4: attempt to access beyond end of device
[ 2450.609925] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2450.612610] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2450.635031] FAT-fs (loop6): bogus number of reserved sectors
[ 2450.636493] FAT-fs (loop6): Can't find a valid FAT filesystem
12:39:23 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:39:23 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)

12:39:23 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180), 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2450.764468] loop4: detected capacity change from 0 to 40
[ 2450.811210] loop0: detected capacity change from 0 to 40
[ 2450.837518] loop7: detected capacity change from 0 to 40
[ 2450.839984] syz-executor.4: attempt to access beyond end of device
[ 2450.839984] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2450.841883] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2450.882537] FAT-fs (loop7): bogus number of reserved sectors
[ 2450.883883] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2450.895770] loop2: detected capacity change from 0 to 40
12:39:23 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)

[ 2450.977024] syz-executor.2: attempt to access beyond end of device
[ 2450.977024] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2450.978848] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:39:23 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2451.029310] syz-executor.0: attempt to access beyond end of device
[ 2451.029310] loop0: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2451.066011] loop3: detected capacity change from 0 to 40
[ 2451.099769] syz-executor.0: attempt to access beyond end of device
[ 2451.099769] loop0: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2451.175227] loop4: detected capacity change from 0 to 40
[ 2451.193587] syz-executor.3: attempt to access beyond end of device
[ 2451.193587] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2451.221115] syz-executor.3: attempt to access beyond end of device
[ 2451.221115] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
12:39:23 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

[ 2451.334721] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2451.369061] loop2: detected capacity change from 0 to 40
12:39:37 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2464.657527] loop3: detected capacity change from 0 to 40
[ 2464.660487] loop0: detected capacity change from 0 to 40
12:39:37 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:39:37 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:39:37 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:39:37 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:39:37 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

[ 2464.669676] loop7: detected capacity change from 0 to 40
12:39:37 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')

12:39:37 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2464.683046] loop1: detected capacity change from 0 to 40
[ 2464.683461] loop6: detected capacity change from 0 to 40
[ 2464.693593] FAT-fs (loop6): bogus number of reserved sectors
[ 2464.694073] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2464.707674] bio_check_eod: 2 callbacks suppressed
[ 2464.707685] syz-executor.3: attempt to access beyond end of device
[ 2464.707685] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2464.710239] syz-executor.0: attempt to access beyond end of device
[ 2464.710239] loop0: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2464.713138] loop4: detected capacity change from 0 to 40
[ 2464.718531] loop2: detected capacity change from 0 to 40
[ 2464.722159] loop5: detected capacity change from 0 to 40
[ 2464.735036] syz-executor.0: attempt to access beyond end of device
[ 2464.735036] loop0: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2464.738719] FAT-fs (loop5): bogus number of reserved sectors
[ 2464.739169] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2464.779308] syz-executor.7: attempt to access beyond end of device
[ 2464.779308] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2464.780498] Buffer I/O error on dev loop7, logical block 10, lost async page write
12:39:37 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)

[ 2464.830676] syz-executor.1: attempt to access beyond end of device
[ 2464.830676] loop1: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2464.845221] syz-executor.2: attempt to access beyond end of device
[ 2464.845221] loop2: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2464.864242] loop3: detected capacity change from 0 to 40
[ 2464.883916] syz-executor.3: attempt to access beyond end of device
[ 2464.883916] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2464.888684] syz-executor.3: attempt to access beyond end of device
[ 2464.888684] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2464.906827] syz-executor.2: attempt to access beyond end of device
[ 2464.906827] loop2: rw=2049, sector=92, nr_sectors = 4 limit=40
12:39:37 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
syncfs(0xffffffffffffffff)

[ 2464.940797] syz-executor.4: attempt to access beyond end of device
[ 2464.940797] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2464.942879] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:39:37 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f00000003c0), 0x0, 0x8)

[ 2464.969250] loop0: detected capacity change from 0 to 40
12:39:37 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2465.015081] loop7: detected capacity change from 0 to 40
[ 2465.018680] Buffer I/O error on dev loop0, logical block 10, lost async page write
12:39:37 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
pwrite64(r0, &(0x7f00000003c0)="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", 0x1000, 0x8)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)

12:39:37 executing program 1:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000200)='x', 0x1, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x4f)
setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@mcast2}, 0x14)
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r0})

12:39:37 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

[ 2465.113015] loop3: detected capacity change from 0 to 40
12:39:37 executing program 7:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@mcast2}, 0x14)
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2465.133579] loop0: detected capacity change from 0 to 40
12:39:37 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2465.164717] loop2: detected capacity change from 0 to 40
[ 2465.195027] loop4: detected capacity change from 0 to 40
12:39:37 executing program 1:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@mcast2}, 0x14)
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2465.245578] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:39:50 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:39:50 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2478.171969] loop5: detected capacity change from 0 to 40
[ 2478.178997] FAT-fs (loop5): bogus number of reserved sectors
[ 2478.179480] FAT-fs (loop5): Can't find a valid FAT filesystem
12:39:50 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:39:50 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@mcast2}, 0x14)
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:39:50 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

12:39:50 executing program 7:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@mcast2}, 0x14)
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:39:50 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:39:50 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r3)

[ 2478.186015] loop3: detected capacity change from 0 to 40
[ 2478.209850] bio_check_eod: 5 callbacks suppressed
[ 2478.209861] syz-executor.3: attempt to access beyond end of device
[ 2478.209861] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2478.222245] loop6: detected capacity change from 0 to 40
[ 2478.233029] loop1: detected capacity change from 0 to 40
[ 2478.233156] syz-executor.3: attempt to access beyond end of device
[ 2478.233156] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2478.234156] loop0: detected capacity change from 0 to 40
[ 2478.242604] loop4: detected capacity change from 0 to 40
[ 2478.271700] FAT-fs (loop6): bogus number of reserved sectors
[ 2478.272155] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2478.299597] syz-executor.4: attempt to access beyond end of device
[ 2478.299597] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2478.300576] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:39:50 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2478.352486] syz-executor.0: attempt to access beyond end of device
[ 2478.352486] loop0: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2478.365533] syz-executor.1: attempt to access beyond end of device
[ 2478.365533] loop1: rw=2049, sector=92, nr_sectors = 4 limit=40
12:39:50 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:39:50 executing program 7:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@mcast2}, 0x14)
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2478.412885] syz-executor.0: attempt to access beyond end of device
[ 2478.412885] loop0: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2478.420753] loop2: detected capacity change from 0 to 40
12:39:50 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:39:50 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@mcast2}, 0x14)
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2478.523075] loop3: detected capacity change from 0 to 40
[ 2478.540526] syz-executor.2: attempt to access beyond end of device
[ 2478.540526] loop2: rw=0, sector=28, nr_sectors = 64 limit=40
12:39:50 executing program 1:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@mcast2}, 0x14)
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2478.566273] syz-executor.2: attempt to access beyond end of device
[ 2478.566273] loop2: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2478.592020] loop4: detected capacity change from 0 to 40
[ 2478.644732] syz-executor.3: attempt to access beyond end of device
[ 2478.644732] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2478.690560] syz-executor.3: attempt to access beyond end of device
[ 2478.690560] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2478.694869] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:40:04 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:40:04 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', <r4=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@mcast2, r4}, 0x14)
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:40:04 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:40:04 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:40:04 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@mcast2}, 0x14)
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:40:04 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:40:04 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:40:04 executing program 1:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@mcast2}, 0x14)
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2491.755015] loop7: detected capacity change from 0 to 40
[ 2491.755827] loop6: detected capacity change from 0 to 40
[ 2491.759520] FAT-fs (loop6): bogus number of reserved sectors
[ 2491.759964] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2491.775994] loop5: detected capacity change from 0 to 40
[ 2491.787934] loop3: detected capacity change from 0 to 40
[ 2491.797731] loop4: detected capacity change from 0 to 40
[ 2491.804546] FAT-fs (loop5): bogus number of reserved sectors
[ 2491.805469] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2491.843961] bio_check_eod: 1 callbacks suppressed
[ 2491.843982] syz-executor.7: attempt to access beyond end of device
[ 2491.843982] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
12:40:04 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@mcast2}, 0x14)
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:40:04 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
sendfile(r2, r1, 0x0, 0xfffffdef)

12:40:04 executing program 1:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', <r4=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@mcast2, r4}, 0x14)
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2491.889882] syz-executor.3: attempt to access beyond end of device
[ 2491.889882] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2491.908262] syz-executor.4: attempt to access beyond end of device
[ 2491.908262] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2491.910181] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2491.947482] syz-executor.3: attempt to access beyond end of device
[ 2491.947482] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2491.991254] loop2: detected capacity change from 0 to 40
12:40:04 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:40:04 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')

[ 2492.122807] syz-executor.2: attempt to access beyond end of device
[ 2492.122807] loop2: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2492.130205] loop4: detected capacity change from 0 to 40
12:40:04 executing program 3:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDELRT(r3, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@mcast2, r5}, 0x14)
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:40:04 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@mcast2}, 0x14)
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2492.177140] syz-executor.2: attempt to access beyond end of device
[ 2492.177140] loop2: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2492.275250] loop7: detected capacity change from 0 to 40
[ 2492.382605] syz-executor.7: attempt to access beyond end of device
[ 2492.382605] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2492.401851] syz-executor.7: attempt to access beyond end of device
[ 2492.401851] loop7: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2492.466976] syz-executor.4: attempt to access beyond end of device
[ 2492.466976] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2492.468942] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:40:19 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:40:19 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@mcast2}, 0x14)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:40:19 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:40:19 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDELRT(r3, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@mcast2, r5}, 0x14)
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:40:19 executing program 1:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="240000002e000100000000000000000008000000020000000800b100b77e91be15a5ab0000000000000000000000007ca1205a97c47f5f1450ee32ad412d7b9535d07ccbd9a4de7a2c574998311d0bbadcf94da2cf8f4a03fab24e803208e9de82e5c23fe5e417f1e1fb5ce534cc460002aaa340fe92acbc0fa1f391dcb533de17e8a58df0fc35c45c706c1e1a16bbac"], 0x24}], 0x1}, 0x0)

12:40:19 executing program 3:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="240000002e000100000000000000000008000000020000000800b100b77e91be15a5ab0000000000000000000000007ca1205a97c47f5f1450ee32ad412d7b9535d07ccbd9a4de7a2c574998311d0bbadcf94da2cf8f4a03fab24e803208e9de82e5c23fe5e417f1e1fb5ce534cc460002aaa340fe92acbc0fa1f391dcb533de17e8a58df0fc35c45c706c1e1a16bbac"], 0x24}], 0x1}, 0x0)

12:40:19 executing program 7:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDELRT(r3, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@mcast2, r5}, 0x14)
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:40:19 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2507.238426] loop6: detected capacity change from 0 to 40
[ 2507.254922] FAT-fs (loop6): bogus number of reserved sectors
[ 2507.256008] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2507.262670] loop4: detected capacity change from 0 to 40
[ 2507.266448] loop5: detected capacity change from 0 to 40
[ 2507.291345] FAT-fs (loop5): bogus number of reserved sectors
[ 2507.292171] FAT-fs (loop5): Can't find a valid FAT filesystem
12:40:19 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_audit(0x10, 0x3, 0x9)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:40:19 executing program 1:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="240000002e000100000000000000000008000000020000000800b100b77e91be15a5ab0000000000000000000000007ca1205a97c47f5f1450ee32ad412d7b9535d07ccbd9a4de7a2c574998311d0bbadcf94da2cf8f4a03fab24e803208e9de82e5c23fe5e417f1e1fb5ce534cc460002aaa340fe92acbc0fa1f391dcb533de17e8a58df0fc35c45c706c1e1a16bbac"], 0x24}], 0x1}, 0x0)

12:40:19 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)

12:40:19 executing program 3:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDELRT(r3, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:40:19 executing program 7:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDELRT(r3, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:40:19 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2507.585614] syz-executor.4: attempt to access beyond end of device
[ 2507.585614] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2507.587290] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2507.596886] loop2: detected capacity change from 0 to 40
[ 2507.696654] syz-executor.2: attempt to access beyond end of device
[ 2507.696654] loop2: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2507.728238] syz-executor.2: attempt to access beyond end of device
[ 2507.728238] loop2: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2521.763030] loop6: detected capacity change from 0 to 40
12:40:34 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:40:34 executing program 3:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDELRT(r3, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:40:34 executing program 7:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDELRT(r3, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:40:34 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:40:34 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:40:34 executing program 1:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDELRT(r3, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
link(&(0x7f0000001300)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:40:34 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:40:34 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2521.783093] loop4: detected capacity change from 0 to 40
[ 2521.785548] FAT-fs (loop6): bogus number of reserved sectors
[ 2521.786844] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2521.804977] loop5: detected capacity change from 0 to 40
12:40:34 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2521.869535] FAT-fs (loop5): bogus number of reserved sectors
[ 2521.870030] FAT-fs (loop5): Can't find a valid FAT filesystem
12:40:34 executing program 7:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x4f)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="240000002e000100000000000000000008000000020000000800b100b77e91be15a5ab0000000000000000000000007ca1205a97c47f5f1450ee32ad412d7b9535d07ccbd9a4de7a2c574998311d0bbadcf94da2cf8f4a03fab24e803208e9de82e5c23fe5e417f1e1fb5ce534cc460002aaa340fe92acbc0fa1f391dcb533de17e8a58df0fc35c45c706c1e1a16bbac"], 0x24}], 0x1}, 0x0)

12:40:34 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:40:34 executing program 1:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="240000002e000100000000000000000008000000020000000800b100b77e91be15a5ab0000000000000000000000007ca1205a97c47f5f1450ee32ad412d7b9535d07ccbd9a4de7a2c574998311d0bbadcf94da2cf8f4a03fab24e803208e9de82e5c23fe5e417f1e1fb5ce534cc460002aaa340fe92acbc0fa1f391dcb533de17e8a58df0fc35c45c706c1e1a16bbac"], 0x24}], 0x1}, 0x0)

12:40:34 executing program 3:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="240000002e000100000000000000000008000000020000000800b100b77e91be15a5ab0000000000000000000000007ca1205a97c47f5f1450ee32ad412d7b9535d07ccbd9a4de7a2c574998311d0bbadcf94da2cf8f4a03fab24e803208e9de82e5c23fe5e417f1e1fb5ce534cc460002aaa340fe92acbc0fa1f391dcb533de17e8a58df0fc35c45c706c1e1a16bbac"], 0x24}], 0x1}, 0x0)

[ 2522.033832] syz-executor.4: attempt to access beyond end of device
[ 2522.033832] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2522.034884] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:40:34 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:40:34 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:40:34 executing program 1:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x4f)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_audit(0x10, 0x3, 0x9)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="240000002e000100000000000000000008000000020000000800b100b77e91be15a5ab0000000000000000000000007ca1205a97c47f5f1450ee32ad412d7b9535d07ccbd9a4de7a2c574998311d0bbadcf94da2cf8f4a03fab24e803208e9de82e5c23fe5e417f1e1fb5ce534cc460002aaa340fe92acbc0fa1f391dcb533de17e8a58df0fc35c45c706c1e1a16bbac"], 0x24}], 0x1}, 0x0)

[ 2522.248890] loop4: detected capacity change from 0 to 40
[ 2522.376550] syz-executor.4: attempt to access beyond end of device
[ 2522.376550] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2522.377862] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:40:49 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:40:49 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:40:49 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2536.798133] loop5: detected capacity change from 0 to 40
12:40:49 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:40:49 executing program 7:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x4f)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_audit(0x10, 0x3, 0x9)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="240000002e000100000000000000000008000000020000000800b100b77e91be15a5ab0000000000000000000000007ca1205a97c47f5f1450ee32ad412d7b9535d07ccbd9a4de7a2c574998311d0bbadcf94da2cf8f4a03fab24e803208e9de82e5c23fe5e417f1e1fb5ce534cc460002aaa340fe92acbc0fa1f391dcb533de17e8a58df0fc35c45c706c1e1a16bbac"], 0x24}], 0x1}, 0x0)

12:40:49 executing program 3:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDELRT(r3, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@mcast2, r5}, 0x14)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:40:49 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:40:49 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 1)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2536.802290] FAT-fs (loop5): bogus number of reserved sectors
[ 2536.802819] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2536.855030] loop4: detected capacity change from 0 to 40
[ 2536.863991] loop6: detected capacity change from 0 to 40
[ 2536.867837] loop1: detected capacity change from 0 to 40
[ 2536.905951] FAT-fs (loop6): invalid media value (0x00)
[ 2536.906916] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2537.038538] syz-executor.4: attempt to access beyond end of device
[ 2537.038538] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2537.040499] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:40:49 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:40:49 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:40:49 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000) (fail_nth: 1)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2537.133610] syz-executor.1: attempt to access beyond end of device
[ 2537.133610] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2537.135692] Buffer I/O error on dev loop1, logical block 10, lost async page write
12:40:49 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 1)

[ 2537.250215] loop3: detected capacity change from 0 to 40
12:40:49 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:40:49 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2537.313208] syz-executor.3: attempt to access beyond end of device
[ 2537.313208] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2537.408078] loop7: detected capacity change from 0 to 40
12:40:49 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 2)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:40:49 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000) (fail_nth: 2)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2537.502744] loop4: detected capacity change from 0 to 40
[ 2537.576554] loop1: detected capacity change from 0 to 40
[ 2537.667738] loop3: detected capacity change from 0 to 40
[ 2537.674760] syz-executor.4: attempt to access beyond end of device
[ 2537.674760] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2537.676531] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2537.738843] syz-executor.3: attempt to access beyond end of device
[ 2537.738843] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2537.741136] syz-executor.1: attempt to access beyond end of device
[ 2537.741136] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2537.743140] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2537.761629] syz-executor.3: attempt to access beyond end of device
[ 2537.761629] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
12:41:03 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 3)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:03 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:03 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:41:03 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 2)

12:41:03 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2550.719634] loop4: detected capacity change from 0 to 40
12:41:03 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:03 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:03 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000) (fail_nth: 3)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2550.722660] loop7: detected capacity change from 0 to 40
[ 2550.729369] loop3: detected capacity change from 0 to 40
[ 2550.730227] loop1: detected capacity change from 0 to 40
[ 2550.732500] loop5: detected capacity change from 0 to 40
[ 2550.738337] FAT-fs (loop5): bogus number of reserved sectors
[ 2550.738793] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2550.761140] loop6: detected capacity change from 0 to 40
[ 2550.777403] FAT-fs (loop6): invalid media value (0x00)
[ 2550.778515] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2550.780912] syz-executor.7: attempt to access beyond end of device
[ 2550.780912] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2550.803903] syz-executor.3: attempt to access beyond end of device
[ 2550.803903] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2550.820898] syz-executor.4: attempt to access beyond end of device
[ 2550.820898] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2550.822073] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2550.830101] syz-executor.1: attempt to access beyond end of device
[ 2550.830101] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2550.832208] Buffer I/O error on dev loop1, logical block 10, lost async page write
12:41:03 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 3)

12:41:03 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:41:03 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:41:03 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:03 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000) (fail_nth: 4)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2550.964634] loop7: detected capacity change from 0 to 40
12:41:03 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 4)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2550.986064] loop4: detected capacity change from 0 to 40
[ 2551.034887] loop1: detected capacity change from 0 to 40
12:41:03 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 4)

12:41:03 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2551.081838] loop3: detected capacity change from 0 to 40
[ 2551.087703] loop7: detected capacity change from 0 to 40
[ 2551.111634] syz-executor.7: attempt to access beyond end of device
[ 2551.111634] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2551.134809] syz-executor.3: attempt to access beyond end of device
[ 2551.134809] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
12:41:03 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 5)

[ 2551.169530] loop7: detected capacity change from 0 to 40
[ 2551.181033] syz-executor.3: attempt to access beyond end of device
[ 2551.181033] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2551.183742] syz-executor.7: attempt to access beyond end of device
[ 2551.183742] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
12:41:03 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:41:03 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 6)

[ 2551.251287] syz-executor.4: attempt to access beyond end of device
[ 2551.251287] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2551.253173] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2551.275933] loop7: detected capacity change from 0 to 40
12:41:03 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2551.292014] syz-executor.7: attempt to access beyond end of device
[ 2551.292014] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
12:41:03 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 7)

[ 2551.374477] loop7: detected capacity change from 0 to 40
12:41:22 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:22 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 5)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:22 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:22 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000) (fail_nth: 5)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:22 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:22 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:41:22 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 8)

[ 2570.448113] loop3: detected capacity change from 0 to 40
[ 2570.448248] loop5: detected capacity change from 0 to 40
[ 2570.451061] loop4: detected capacity change from 0 to 40
[ 2570.458679] loop6: detected capacity change from 0 to 40
12:41:22 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000))

[ 2570.466856] FAT-fs (loop6): invalid media value (0x00)
[ 2570.467338] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2570.479027] loop1: detected capacity change from 0 to 40
[ 2570.479296] FAT-fs (loop5): bogus number of reserved sectors
[ 2570.480373] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2570.486995] bio_check_eod: 1 callbacks suppressed
[ 2570.487006] syz-executor.3: attempt to access beyond end of device
[ 2570.487006] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2570.493251] loop7: detected capacity change from 0 to 40
[ 2570.504130] syz-executor.3: attempt to access beyond end of device
[ 2570.504130] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
12:41:22 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2570.535018] syz-executor.7: attempt to access beyond end of device
[ 2570.535018] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
12:41:22 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000))

[ 2570.592131] syz-executor.4: attempt to access beyond end of device
[ 2570.592131] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2570.593177] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:41:23 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000) (fail_nth: 6)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2570.648487] syz-executor.1: attempt to access beyond end of device
[ 2570.648487] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2570.649430] Buffer I/O error on dev loop1, logical block 10, lost async page write
12:41:23 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 9)

[ 2570.722339] loop3: detected capacity change from 0 to 40
12:41:23 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:23 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 6)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2570.802960] loop7: detected capacity change from 0 to 40
[ 2570.806223] syz-executor.3: attempt to access beyond end of device
[ 2570.806223] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2570.807815] loop1: detected capacity change from 0 to 40
[ 2570.856589] syz-executor.3: attempt to access beyond end of device
[ 2570.856589] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2570.865728] loop4: detected capacity change from 0 to 40
[ 2570.941895] syz-executor.1: attempt to access beyond end of device
[ 2570.941895] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2570.943912] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2571.038228] syz-executor.4: attempt to access beyond end of device
[ 2571.038228] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2571.040652] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:41:37 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:37 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:41:37 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:37 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 10)

12:41:37 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000))

12:41:37 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000) (fail_nth: 7)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:37 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 7)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:37 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2585.356891] loop6: detected capacity change from 0 to 40
[ 2585.366743] loop1: detected capacity change from 0 to 40
[ 2585.380224] loop3: detected capacity change from 0 to 40
[ 2585.387852] FAT-fs (loop6): invalid media value (0x00)
[ 2585.388659] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2585.389717] loop4: detected capacity change from 0 to 40
[ 2585.396165] loop7: detected capacity change from 0 to 40
[ 2585.399067] loop5: detected capacity change from 0 to 40
[ 2585.417543] FAT-fs (loop5): bogus number of reserved sectors
[ 2585.418442] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2585.458822] syz-executor.7: attempt to access beyond end of device
[ 2585.458822] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2585.466305] syz-executor.3: attempt to access beyond end of device
[ 2585.466305] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2585.507165] syz-executor.3: attempt to access beyond end of device
[ 2585.507165] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
12:41:37 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:41:37 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2585.567025] syz-executor.4: attempt to access beyond end of device
[ 2585.567025] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2585.569100] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2585.581015] syz-executor.1: attempt to access beyond end of device
[ 2585.581015] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2585.582952] Buffer I/O error on dev loop1, logical block 10, lost async page write
12:41:38 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 11)

12:41:38 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:38 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000) (fail_nth: 8)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:38 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:41:38 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 8)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2585.864489] loop4: detected capacity change from 0 to 40
[ 2585.870669] loop1: detected capacity change from 0 to 40
[ 2585.882868] loop7: detected capacity change from 0 to 40
[ 2585.910052] loop3: detected capacity change from 0 to 40
[ 2585.979214] syz-executor.4: attempt to access beyond end of device
[ 2585.979214] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2585.981289] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:41:38 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2586.043437] syz-executor.3: attempt to access beyond end of device
[ 2586.043437] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2586.101469] syz-executor.3: attempt to access beyond end of device
[ 2586.101469] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2586.165844] syz-executor.1: attempt to access beyond end of device
[ 2586.165844] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2586.167982] Buffer I/O error on dev loop1, logical block 10, lost async page write
12:41:52 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 12)

12:41:52 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:52 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:52 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000) (fail_nth: 9)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:52 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:52 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:41:52 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 9)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:52 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2600.064419] loop1: detected capacity change from 0 to 40
[ 2600.065821] loop6: detected capacity change from 0 to 40
[ 2600.084535] FAT-fs (loop6): invalid media value (0x00)
[ 2600.085269] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2600.092126] loop3: detected capacity change from 0 to 40
[ 2600.101376] loop5: detected capacity change from 0 to 40
[ 2600.105181] loop7: detected capacity change from 0 to 40
[ 2600.106295] loop4: detected capacity change from 0 to 40
[ 2600.119759] FAT-fs (loop5): invalid media value (0x00)
[ 2600.120604] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2600.154526] syz-executor.7: attempt to access beyond end of device
[ 2600.154526] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2600.192850] syz-executor.4: attempt to access beyond end of device
[ 2600.192850] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2600.195001] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2600.198967] syz-executor.3: attempt to access beyond end of device
[ 2600.198967] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2600.232651] syz-executor.1: attempt to access beyond end of device
[ 2600.232651] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2600.234720] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2600.257520] syz-executor.3: attempt to access beyond end of device
[ 2600.257520] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
12:41:52 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 13)

12:41:52 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000200)='x', 0x1, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r0})

12:41:52 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000))

[ 2600.377224] loop7: detected capacity change from 0 to 40
12:41:52 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2600.450530] syz-executor.7: attempt to access beyond end of device
[ 2600.450530] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
12:41:52 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 10)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:52 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000) (fail_nth: 10)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:41:52 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000200)='x', 0x1, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r0})

12:41:52 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 14)

[ 2600.545583] loop4: detected capacity change from 0 to 40
[ 2600.671686] loop1: detected capacity change from 0 to 40
[ 2600.689012] loop3: detected capacity change from 0 to 40
[ 2600.702679] loop7: detected capacity change from 0 to 40
[ 2600.738648] syz-executor.4: attempt to access beyond end of device
[ 2600.738648] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2600.740483] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2600.799119] syz-executor.3: attempt to access beyond end of device
[ 2600.799119] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2600.812222] syz-executor.7: attempt to access beyond end of device
[ 2600.812222] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2600.843591] syz-executor.1: attempt to access beyond end of device
[ 2600.843591] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2600.845480] Buffer I/O error on dev loop1, logical block 10, lost async page write
12:42:06 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:06 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000))

12:42:06 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000) (fail_nth: 11)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2613.862164] loop6: detected capacity change from 0 to 40
12:42:06 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000200)='x', 0x1, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r0})

12:42:06 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 15)

12:42:06 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:06 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:06 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 11)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2613.871959] loop1: detected capacity change from 0 to 40
[ 2613.873613] loop7: detected capacity change from 0 to 40
[ 2613.878636] FAT-fs (loop6): invalid media value (0x00)
[ 2613.879045] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2613.902933] loop3: detected capacity change from 0 to 40
[ 2613.919789] loop4: detected capacity change from 0 to 40
12:42:06 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000))

[ 2613.928150] loop5: detected capacity change from 0 to 40
[ 2613.952916] bio_check_eod: 1 callbacks suppressed
[ 2613.952935] syz-executor.7: attempt to access beyond end of device
[ 2613.952935] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2613.953870] syz-executor.1: attempt to access beyond end of device
[ 2613.953870] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2613.956503] FAT-fs (loop5): invalid media value (0x00)
[ 2613.956529] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2613.957455] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2613.996228] syz-executor.4: attempt to access beyond end of device
[ 2613.996228] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2613.997332] Buffer I/O error on dev loop4, logical block 10, lost async page write
12:42:06 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 12)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2614.074606] syz-executor.3: attempt to access beyond end of device
[ 2614.074606] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
12:42:06 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2614.112044] loop1: detected capacity change from 0 to 40
12:42:06 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:42:06 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 16)

12:42:06 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:06 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000) (fail_nth: 12)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2614.244963] loop7: detected capacity change from 0 to 40
[ 2614.269746] loop4: detected capacity change from 0 to 40
[ 2614.290819] syz-executor.1: attempt to access beyond end of device
[ 2614.290819] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2614.293042] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2614.296539] syz-executor.7: attempt to access beyond end of device
[ 2614.296539] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2614.452090] loop3: detected capacity change from 0 to 40
[ 2614.552612] syz-executor.3: attempt to access beyond end of device
[ 2614.552612] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2614.566275] syz-executor.3: attempt to access beyond end of device
[ 2614.566275] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
12:42:19 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 17)

12:42:19 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:42:19 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 13)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:19 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:19 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:42:19 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000) (fail_nth: 13)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:19 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:19 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2627.614704] loop4: detected capacity change from 0 to 40
[ 2627.615881] loop7: detected capacity change from 0 to 40
[ 2627.618780] loop3: detected capacity change from 0 to 40
[ 2627.620937] loop1: detected capacity change from 0 to 40
[ 2627.621987] loop6: detected capacity change from 0 to 40
[ 2627.633253] loop5: detected capacity change from 0 to 40
[ 2627.642821] FAT-fs (loop5): invalid media value (0x00)
[ 2627.643252] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2627.644060] syz-executor.7: attempt to access beyond end of device
[ 2627.644060] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2627.648436] FAT-fs (loop6): bogus number of FAT sectors
[ 2627.649184] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2627.652470] syz-executor.3: attempt to access beyond end of device
[ 2627.652470] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2627.680496] syz-executor.1: attempt to access beyond end of device
[ 2627.680496] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2627.681554] Buffer I/O error on dev loop1, logical block 10, lost async page write
12:42:20 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 18)

12:42:20 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000) (fail_nth: 14)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:20 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 14)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2627.759071] loop7: detected capacity change from 0 to 40
[ 2627.779405] syz-executor.7: attempt to access beyond end of device
[ 2627.779405] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
12:42:20 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:42:20 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 19)

12:42:20 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2627.861848] loop7: detected capacity change from 0 to 40
[ 2627.874873] syz-executor.7: attempt to access beyond end of device
[ 2627.874873] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
12:42:20 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:20 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 20)

[ 2627.940169] loop4: detected capacity change from 0 to 40
[ 2627.955453] loop1: detected capacity change from 0 to 40
[ 2627.957153] loop3: detected capacity change from 0 to 40
[ 2628.012705] loop7: detected capacity change from 0 to 40
[ 2628.055010] syz-executor.7: attempt to access beyond end of device
[ 2628.055010] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2628.063737] syz-executor.3: attempt to access beyond end of device
[ 2628.063737] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2628.095743] syz-executor.3: attempt to access beyond end of device
[ 2628.095743] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
12:42:33 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:33 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:33 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000) (fail_nth: 15)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:33 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 21)

12:42:33 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 15)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:33 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000200)='x', 0x1, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r0})

12:42:33 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2641.548783] loop4: detected capacity change from 0 to 40
[ 2641.554921] loop5: detected capacity change from 0 to 40
[ 2641.562985] FAT-fs (loop5): invalid media value (0x00)
[ 2641.563435] FAT-fs (loop5): Can't find a valid FAT filesystem
12:42:33 executing program 0:
r0 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2641.577870] loop3: detected capacity change from 0 to 40
[ 2641.594645] loop6: detected capacity change from 0 to 40
[ 2641.598390] loop1: detected capacity change from 0 to 40
[ 2641.606235] FAT-fs (loop6): bogus number of FAT sectors
[ 2641.606705] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2641.612642] loop7: detected capacity change from 0 to 40
[ 2641.628123] syz-executor.3: attempt to access beyond end of device
[ 2641.628123] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
12:42:34 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000200)='x', 0x1, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r0})

[ 2641.658155] syz-executor.3: attempt to access beyond end of device
[ 2641.658155] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2641.670656] syz-executor.7: attempt to access beyond end of device
[ 2641.670656] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
12:42:34 executing program 0:
r0 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:42:34 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2641.723270] syz-executor.1: attempt to access beyond end of device
[ 2641.723270] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2641.724666] Buffer I/O error on dev loop1, logical block 10, lost async page write
12:42:34 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000) (fail_nth: 16)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:34 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 22)

[ 2641.810289] loop4: detected capacity change from 0 to 40
[ 2641.823638] loop3: detected capacity change from 0 to 40
12:42:34 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 16)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:34 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000200)='x', 0x1, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r0})

12:42:34 executing program 0:
r0 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2641.870095] loop7: detected capacity change from 0 to 40
[ 2641.913251] syz-executor.7: attempt to access beyond end of device
[ 2641.913251] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2641.913952] syz-executor.3: attempt to access beyond end of device
[ 2641.913952] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2641.962441] loop1: detected capacity change from 0 to 40
[ 2641.977507] syz-executor.3: attempt to access beyond end of device
[ 2641.977507] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2642.130152] syz-executor.1: attempt to access beyond end of device
[ 2642.130152] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2642.132552] Buffer I/O error on dev loop1, logical block 10, lost async page write
12:42:48 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000) (fail_nth: 23)

12:42:48 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 17)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2656.506991] loop7: detected capacity change from 0 to 40
12:42:48 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:48 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:48 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000) (fail_nth: 17)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:48 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:48 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:42:48 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2656.527897] loop5: detected capacity change from 0 to 40
[ 2656.529087] loop6: detected capacity change from 0 to 40
[ 2656.539551] FAT-fs (loop6): bogus number of FAT sectors
[ 2656.539896] loop3: detected capacity change from 0 to 40
[ 2656.539987] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2656.542177] syz-executor.7: attempt to access beyond end of device
[ 2656.542177] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2656.543342] FAULT_INJECTION: forcing a failure.
[ 2656.543342] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 2656.544421] CPU: 1 PID: 12183 Comm: syz-executor.7 Not tainted 6.0.0-rc1-next-20220819 #1
[ 2656.545080] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1521
[ 2656.545750] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 12183, name: syz-executor.7
[ 2656.546413] preempt_count: 0, expected: 0
[ 2656.546740] RCU nest depth: 0, expected: 0
[ 2656.547076] 1 lock held by syz-executor.7/12183:
[ 2656.547443]  #0: ffff88800eb81768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100
[ 2656.548124] irq event stamp: 2928
[ 2656.548412] hardirqs last  enabled at (2927): [<ffffffff812bd8c8>] __up_console_sem+0x78/0x80
[ 2656.549084] hardirqs last disabled at (2928): [<ffffffff8411f196>] dump_stack_lvl+0x2e/0xb3
[ 2656.549740] softirqs last  enabled at (2852): [<ffffffff8116ba5b>] __irq_exit_rcu+0x11b/0x180
[ 2656.550411] softirqs last disabled at (2815): [<ffffffff8116ba5b>] __irq_exit_rcu+0x11b/0x180
[ 2656.550867] loop1: detected capacity change from 0 to 40
[ 2656.551058] CPU: 1 PID: 12183 Comm: syz-executor.7 Not tainted 6.0.0-rc1-next-20220819 #1
[ 2656.552595] syz-executor.7[12183] cmdline: /syz-executor.7 exec
[ 2656.553054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2656.554173] Call Trace:
[ 2656.554769]  <TASK>
[ 2656.554939]  dump_stack_lvl+0x8b/0xb3
[ 2656.555242]  __might_resched.cold+0x222/0x26b
[ 2656.555856]  down_read_killable+0x75/0x490
[ 2656.556203]  ? down_read_interruptible+0x490/0x490
[ 2656.556620]  __access_remote_vm+0xac/0x6f0
[ 2656.556975]  ? follow_phys+0x2c0/0x2c0
[ 2656.557286]  ? do_raw_spin_lock+0x121/0x260
[ 2656.557664]  ? rwlock_bug.part.0+0x90/0x90
[ 2656.557995]  ? lock_release+0x3b2/0x750
[ 2656.558337]  ? __up_console_sem+0x47/0x80
[ 2656.558676]  get_mm_cmdline.part.0+0x214/0x600
[ 2656.559054]  ? dname_to_vma_addr.isra.0+0x360/0x360
[ 2656.559480]  ? _raw_spin_unlock_irqrestore+0x33/0x60
[ 2656.559903]  get_task_cmdline_kernel+0x1e9/0x230
[ 2656.560287]  dump_stack_print_cmdline.part.0+0x82/0x150
[ 2656.560751]  ? _atomic_dec_and_lock_irqsave+0x150/0x150
[ 2656.561170]  ? __wake_up_klogd.part.0+0xc5/0xf0
[ 2656.561599]  ? dump_stack_print_info+0xc6/0x190
[ 2656.561973]  dump_stack_print_info+0x185/0x190
[ 2656.562368]  dump_stack_lvl+0x7f/0xb3
[ 2656.562693]  should_fail.cold+0x5/0xa
[ 2656.563008]  _copy_to_user+0x2a/0x140
[ 2656.563346]  simple_read_from_buffer+0xcc/0x160
[ 2656.563727]  proc_fail_nth_read+0x198/0x230
[ 2656.564071]  ? proc_tid_comm_permission+0x1c0/0x1c0
[ 2656.564494]  ? security_file_permission+0xb1/0xe0
[ 2656.564875]  vfs_read+0x253/0x930
[ 2656.565151]  ? proc_tid_comm_permission+0x1c0/0x1c0
[ 2656.565550]  ? kernel_read+0x1c0/0x1c0
[ 2656.565871]  ? __fget_files+0x270/0x450
[ 2656.566191]  ksys_read+0x127/0x250
[ 2656.566493]  ? __ia32_sys_pwrite64+0x220/0x220
[ 2656.566850]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2656.567265]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2656.567700]  do_syscall_64+0x3b/0x90
[ 2656.568002]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2656.568428] RIP: 0033:0x7fcff96a069c
[ 2656.568716] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2656.570093] RSP: 002b:00007fcff6c63170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2656.570693] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fcff96a069c
[ 2656.571241] RDX: 000000000000000f RSI: 00007fcff6c631e0 RDI: 0000000000000006
[ 2656.571795] RBP: 00007fcff6c631d0 R08: 0000000000000000 R09: 0000000000000000
[ 2656.572375] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002
[ 2656.572913] R13: 00007ffc0083088f R14: 00007fcff6c63300 R15: 0000000000022000
[ 2656.573500]  </TASK>
[ 2656.574875] FAT-fs (loop5): invalid media value (0x00)
[ 2656.575768] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2656.587586] loop4: detected capacity change from 0 to 40
[ 2656.594189] syz-executor.7[12183] cmdline: /syz-executor.7 exec
[ 2656.594712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2656.595825] Call Trace:
[ 2656.596031]  <TASK>
[ 2656.596227]  dump_stack_lvl+0x8b/0xb3
[ 2656.596567]  should_fail.cold+0x5/0xa
[ 2656.596877]  _copy_to_user+0x2a/0x140
[ 2656.597189]  simple_read_from_buffer+0xcc/0x160
[ 2656.597590]  proc_fail_nth_read+0x198/0x230
[ 2656.598037]  ? proc_tid_comm_permission+0x1c0/0x1c0
[ 2656.598546]  ? security_file_permission+0xb1/0xe0
[ 2656.599001]  vfs_read+0x253/0x930
[ 2656.599298]  ? proc_tid_comm_permission+0x1c0/0x1c0
[ 2656.599726]  ? kernel_read+0x1c0/0x1c0
[ 2656.600046]  ? __fget_files+0x270/0x450
[ 2656.600408]  ksys_read+0x127/0x250
[ 2656.600694]  ? __ia32_sys_pwrite64+0x220/0x220
[ 2656.601054]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2656.601481]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2656.601900]  do_syscall_64+0x3b/0x90
[ 2656.602197]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2656.602622] RIP: 0033:0x7fcff96a069c
[ 2656.602916] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2656.604292] RSP: 002b:00007fcff6c63170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2656.604894] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fcff96a069c
[ 2656.605459] RDX: 000000000000000f RSI: 00007fcff6c631e0 RDI: 0000000000000006
[ 2656.605993] RBP: 00007fcff6c631d0 R08: 0000000000000000 R09: 0000000000000000
[ 2656.606552] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002
[ 2656.607100] R13: 00007ffc0083088f R14: 00007fcff6c63300 R15: 0000000000022000
[ 2656.607677]  </TASK>
12:42:49 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2656.647795] syz-executor.3: attempt to access beyond end of device
[ 2656.647795] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2656.682055] syz-executor.3: attempt to access beyond end of device
[ 2656.682055] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
[ 2656.730960] syz-executor.1: attempt to access beyond end of device
[ 2656.730960] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2656.732133] Buffer I/O error on dev loop1, logical block 10, lost async page write
12:42:49 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x8000)

12:42:49 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:42:49 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000) (fail_nth: 18)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:49 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2656.835917] loop7: detected capacity change from 0 to 40
12:42:49 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:42:49 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 18)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

12:42:49 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 2656.888588] loop4: detected capacity change from 0 to 40
[ 2656.894833] syz-executor.7: attempt to access beyond end of device
[ 2656.894833] loop7: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2656.901159] loop3: detected capacity change from 0 to 40
[ 2656.968477] syz-executor.3: attempt to access beyond end of device
[ 2656.968477] loop3: rw=0, sector=28, nr_sectors = 64 limit=40
[ 2656.991845] loop1: detected capacity change from 0 to 40
[ 2657.001876] syz-executor.3: attempt to access beyond end of device
[ 2657.001876] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40
12:42:49 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0x1800)

[ 2657.071051] loop7: detected capacity change from 0 to 40
12:42:49 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(0x0, 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1})

12:42:49 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[ 2657.191897] loop4: detected capacity change from 0 to 40
[ 2657.252079] syz-executor.1: attempt to access beyond end of device
[ 2657.252079] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2657.253885] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2657.349562] kworker/u4:0: attempt to access beyond end of device
[ 2657.349562] loop7: rw=1, sector=44, nr_sectors = 48 limit=40

VM DIAGNOSIS:
12:42:49  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=1ffff1100835aeb0 RCX=ffffffff812943df RDX=1ffff11001fbeb6c
RSI=0000000000000008 RDI=ffffffff86ca37c0 RBP=ffff88800fdf5b40 RSP=ffff888041ad7540
R8 =0000000000000000 R9 =ffffffff86ca381f R10=fffffbfff0d94703 R11=0000000000000001
R12=0000000000000009 R13=ffff88800fdf5b60 R14=0000000000000003 R15=0000000000000200
RIP=ffffffff817892b4 RFL=00000056 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555555d65400 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb709ae6fe8 CR3=000000000e87e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff4ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 ff00000000ff0000 00000000000000ff
YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525
YMM02=0000000000000000 0000000000000000 00007fb70c6587e0 00007fb70c6587c0
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8240add1 RDI=ffffffff8762a6c0 RBP=ffffffff8762a680 RSP=ffff8880460071a8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=000000000000000a R13=ffffffff8762a680 R14=0000000000000010 R15=ffffffff8240adc0
RIP=ffffffff8240ae29 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fcff6c63700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2d826000 CR3=000000004199c000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff4ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000