0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x5, &(0x7f0000000100)=0x1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = syz_open_dev$mouse(&(0x7f0000000200), 0x1, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0x0, r4, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x6000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x14804, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, ')&]'}}, {@euid_lt={'euid<', 0xee01}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x61, 0x35, 0x39, 0x36, 0x0, 0x65, 0x33], 0x2d, [0x62, 0x35, 0x61, 0x39], 0x2d, [0x35, 0x39, 0x36, 0x65], 0x2d, [0x34, 0x64, 0x38, 0x34], 0x2d, [0x63, 0x38, 0x3b, 0x0, 0x62, 0x65, 0x30, 0x38]}}}, {@obj_role={'obj_role', 0x3d, ','}}, {@audit}, {@uid_lt={'uid<', r5}}, {@smackfshat={'smackfshat', 0x3d, '\''}}]}})
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000140), 0x4)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)

04:37:35 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r0, {0x7}}, './file0\x00'})
read(r3, &(0x7f0000001300)=""/138, 0x8a)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r5 = fsmount(0xffffffffffffffff, 0x0, 0xf0)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r6=>0x0})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r8=>r5}, './file0\x00'})
ioctl$BTRFS_IOC_RM_DEV_V2(r7, 0x5000943a, &(0x7f0000000300)={{r8}, r6, 0x8, @unused=[0xffffffffffff3657, 0x1, 0x46bb, 0x9], @subvolid=0x40})
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0)

04:37:35 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x240300, 0x81)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000100)={{r1}, "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"})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
fcntl$getflags(r2, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001140))
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0)

04:37:35 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007900)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000100)=""/142, 0x8e}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000280)=""/104, 0x68}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000003c0)=""/236, 0xec}, {&(0x7f00000004c0)=""/109, 0x6d}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000640)=""/241, 0xf1}], 0x9, &(0x7f0000000800)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="060000ff"], 0x60}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000001940)=[{&(0x7f0000000900)}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000001980), 0x0, &(0x7f00000019c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000001ac0)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001b40)=""/146, 0x92}], 0x1, &(0x7f0000001c40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000001d40)=@abs, 0x6e, &(0x7f0000003140)=[{&(0x7f0000001dc0)=""/181, 0xb5}, {&(0x7f0000001e80)=""/155, 0x9b}, {&(0x7f0000001f40)=""/11, 0xb}, {&(0x7f0000001f80)=""/33, 0x21}, {&(0x7f0000001fc0)=""/181, 0xb5}, {&(0x7f0000002080)=""/54, 0x36}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/69, 0x45}], 0x8, &(0x7f00000031c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r1=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f00000032c0)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000003340)=""/205, 0xcd}, {&(0x7f0000003440)=""/226, 0xe2}, {&(0x7f0000003540)=""/221, 0xdd}, {&(0x7f0000003640)=""/192, 0xc0}, {&(0x7f0000003700)=""/56, 0x38}, {&(0x7f0000003740)=""/82, 0x52}, {&(0x7f00000037c0)=""/148, 0x94}, {&(0x7f0000003880)=""/37, 0x25}, {&(0x7f00000038c0)=""/205, 0xcd}], 0x9}}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000003a80)=""/222, 0xde}, {&(0x7f0000003b80)=""/246, 0xf6}], 0x2, &(0x7f0000003cc0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000004f80)=[{&(0x7f0000003d00)=""/5, 0x5}, {&(0x7f0000003d40)=""/248, 0xf8}, {&(0x7f0000003e40)}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/18, 0x12}, {&(0x7f0000004ec0)=""/158, 0x9e}], 0x6}}, {{0x0, 0x0, &(0x7f00000061c0)=[{&(0x7f0000005000)=""/43, 0x2b}, {&(0x7f0000005040)=""/235, 0xeb}, {&(0x7f0000005140)=""/4096, 0x1000}, {&(0x7f0000006140)=""/76, 0x4c}], 0x4, &(0x7f0000006200)}}, {{&(0x7f0000006240)=@abs, 0x6e, &(0x7f0000007840)=[{&(0x7f00000062c0)=""/136, 0x88}, {&(0x7f0000006380)=""/156, 0x9c}, {&(0x7f0000006440)=""/236, 0xec}, {&(0x7f0000006540)=""/4096, 0x1000}, {&(0x7f0000007540)=""/57, 0x39}, {&(0x7f0000007580)=""/5, 0x5}, {&(0x7f00000075c0)=""/152, 0x98}, {&(0x7f0000007680)=""/197, 0xc5}, {&(0x7f0000007780)=""/147, 0x93}], 0x9}}], 0xa, 0x61, &(0x7f0000007b80))
syz_open_procfs(r1, &(0x7f0000007bc0)='attr/sockcreate\x00')

04:37:35 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x240300, 0x81)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000100)={{r1}, "cae1f1a28c1e3d93229bd483f520b18be7e5c4ce0deea94feb2cfdc56a6a13a002dc1bb0e33fbe04f3ab7d5ef0683c3d9300886644e33f2ce81c6eacc35add5d10eea7601bef2de934abd7753f9c893e53cb23fe451bfb863d91d5354eaac65af876eeec7cdc17744e8232bbd6049f35baa209676b63790560041ce8193939312c15d005c8586cb4b5ce8f129a9e0776478d61d97f1ece8a660fe02f2f8fe03617aa29a244d6e1b96f0fec058c8235373a481fdfd4b71622d2fcc67ab3f9b385716ac343900961ae37e16912c5bdc6eb530aaddbb545c2bd05e7852d79fb5c7035f5fbf5ee32f5a1740ebe53ab72b17f1d745c33dff613b521889aa6e046a067cc39cfb6e1e6ad0a4df20d4e4aceba60abbabf4bd6824a8df09b7b22151de65cd23cb04ee64dd404bcab682b2a33a8d068ace2e5e5ba73c63599ecf5dd971e9445c1952e5e3c2596eff5bb9d5aba26b4c53ea8bdbbd016a01ca48a5620c0db79c478b21337a00aa270d030afb02a335f11d4020b74ae53856461033ae8a949767edb3836ffdeb5960d07a78235d8e55b73c7820d742dd5aa74a150adfd7c0312e6828b275f177638b553b65c017047ad7b24b9bccd2891250cb1b128f1b7a649cdb693481029651993565148143f3a4247e5291c8a8e4f0b3baca5a1af8288cd450200449173018befd656bdc3ceea506c0ec57c6d80415fa7a747a15a6eae6bead3085c5086d4f9b78797f6bdc86c7ca5542174d50045e87cf8e6f6872c409529358bf54462cef07133b75e5b809faf054b19cf448857088d876c2c9efbdb4bfd4b156bc65b92ac2817b4954b66f7897cd891589131beff0fed8ce747498cf195b7e034dcf864393cf1277f77d14cc35e8946c002e1f0f5cf6d959a19c4ca353c2d85e64a33b34631e2bff3a225e7dd7607427c193e0b9eb27cb36add1336f54a1b289dfca21709554c16904986ba57de0a80d0435b9eb4ca8b880406c8ca3f2369113599e49de0a83f6c882c91ed61ebd71dffac8a2fc51eb03e6a814d70675817eaf175f74304d9cbbf4040b6f9cf5aa7db80625ffd679ad006854da40402fb95b009524e3ab06f94add32390a5e9b309b3dc1366a9a6f67e014bef704edde66898b27d37af7dcae60aabb44e17949fd611403b061fd3d8f661315ab7f0d4a4004108023929cb174bdb189f4f7af8c0597ff562da10b334c2be94dceccec4c24c8f733f3f3b0bf21c3bd7b501aa38ab5502b7b6268654d4b8133d9c5d2d1fff0fd72d0dd6e5aca03898c0cec29433e11e136aa1bef9e8e01ed79c8ac1ba2c9e0c36a0b83fd5fa936e190e2403c7fb34f2d9e36e134333aedfa3365125ff7fcf901eb8704dfd0e84fa3a392e3927dc13267585e4ec6a0141ab79553176076c3c240d1ddd62213cccc532744367a9e42fda255f1e4aa1b7a62a78bcbc43c9e052e6cf3b97d998b2bb502d07f594518026b4527e32e474466220bc9f8bcad9739f4752c40578803dfc47c7168a2ab395c30f852241cd42ea2a6f87ba2e3c1b5d96a01ba3b43c910eaa2eb3250045085de36a7dae884399d1735eed36864eba64ccc8b5cf7c36d3c83accb97b5d48687319e4c165748527b803d813c304f597d46d364b46198416f7888b176ebd3c0c326b19de1bb564df73340d6437bba90e927ef78adac6336b210094b42303824a37053065c7d2763ee5e820556057b1f55db21426b5dcd34c7f25d55e1a089ee85e08165020996042cd7c1a9454fdf86f630a980cbfb897339ce3009e1c7a19537e737ea0275be800d3b880300f87795cf4ff577822023654f603bcbbc143779ba7ead2b61296358d623e445533cfc0d474ea37e9eb62cfc41c86cfa8e930782bc54bbd46fe4f343e9eed3bb14864fb910cadae00fa1984d21cb5e9b0c771280c760572217e02b2a42bdeb1b401c9044703f29373cffdc2f40865203211c62c376e6e7fa4c93626dcc9463c17a9ecab254edbb1963e9d2302f29e0e83c8111b8937ab7e77864d3958efeee9bd7126ae11b133ac21e155de30f6bf0f25048635a1ceebfeececb5d6e69fe4bf28900fd1470c8395a3a4060d82300224f70a6202e9a0b2b5ccdddb632720383812fb7735bde86ee0435ef77f0de30515da6316922c50821d03ad7eb27f14babb9d29dd3445f18baa1f596631e39342d28e54134f7491e6d93be735456a02d6a7f30ce643f76a37088a275f9444125c787d846df79ce79a5fbdcdd8cdd105c70024da5f38e567e958da246070710b641faff4b00edfc0e7d20d1f44bb3c78472da66d0b3a085e5cd4aeb8579a645f7c0bb8aa961a856db74511a6b47109572821bfbedba0a0d7b5c044aa42b663d8110d53a1d3a040e95d61d4d70cdf0e2c6225c9b2052d7920d7c6212bc3de47021da20ebdb62e0bf41cb05ba925eeafa355ac46ac52419a6d97a1ce6922899f216b9d3a86d9774461f144fa17292ec5850815e7fbfff9d657d7fdfce661f25aafac4fa7d037846828014cfbf8c3d6f242f06a4c960c2524ab480df7c9e1e9d380a86edea0ac276b4b22f071f1d0a416cbb39733e60608ac27a60d8e18ba82c58fd735c1fbaacea2ff8188292488a161c12cf1cc7b7ddd5ba680a71f76650c69b506661c9ff3b3b658e68a7f360c61442a8c952f376e0c02df185ff5105599b2403502efe9e4a6e1f23113e644eee5fda3a3d23f886a6a8f6fa5a1317476788d9026d10aef360765eb94fcbf93df81555013c256b79d65acee975e5bee5cdefcc31612ed3ada12a37e93f84424dd670a26b4d1a3d7c2fe32fe889080586c19f715c488be0cd88ab008ed3b6a048fff52e65e83462731ffc520138783973b2b2064948cdef817893082d64e84491fbae1489969c1ce7f48369bd5222e51d7f3ccb252166ed3cbaef310a934f9aca0c889b73fd1ffee72f334efe0c59477ff52d418f0aba195e9f0a85fdc72eb6a7be2a3fdc8ea30393168b710dfc4e620a3968567d60754e30da92eddc384559d28e4202471a390f9d439a5420206e3e667f0f486fc1aea4286e39ee9b854472b55bf9b88e7290fd52ddb1119fbbc3b46d833f7591b2056ad8006522ace636f0a42487e55904bac6a281b6f4f436f202003518cba6fc3b706c57c2693c1a57da0a9985743f1bd7ff974e271005241b19cbf42c686326c7c39f2476ce9449a3634c976701f36844699ac796166c931e6adbbf2d764f4b12519c772e82381e75f8f77495882895d3fe32591a90849f879482767bdffeaa72677fc8a3d524b30cc53408797225f98c2c115661c8bb1779d1c353fe9f5547a57d865b6552534dbddbea6c5d8dd2ed7a7a18ec047805dd8594d5dd591504c6fba68be9990b85ddbbda9f696d875d1239d6008325476ebbb4d3687fc64c99350443c213f85c73274f7b38a7dbca81d3001f04a330a44f6466c01ad1b4f73bda824b9a4cfdb92a124e0c3e83af4244ae89cd38adbadd3d2eed9d417abfe84bcaceaa01dde7455d9c3a62d81487b184f9efb2513c85b3ff3b6b5d3395bd88c45e0a764a056d5a2143985a081bce56a5871f5e6a481b6118b760fadac570697f141747ca11264f56288c5c52e1142eb264b69c27f73607f81dcd5bb6e740d6f94779719f5c90f3c018d1d56af318d71d18e7ee8762e89c5e2cb89396c379c5baa1da49b4bc66e09c61c7c2c1b882548789aa189d72bd768adb77318e9c6296c690cd0bf2bbe421dcee22178073f1e2bb90d3d39b1f43566db8b2d959cc3482a8b40f7690efc42fdaae468eefe11b3a49b923eb730562f658cc7ecf7055f96ac54bfc5ebe0f392e7b6e1b1e7e35018175eeee156225bdfbb57874483596da1cb2b9ecbaa7cb8b97057278b02b937cf6f284ca6bedac220775bbca90e1e76ce783339e18109b2b113933ae10b93d5e4bfb554b6d440b26fd05f4f7f5ed37916008baf1f75edf7ac8575fb8051f52aad96e39eac9c981062a86583a9c917baccb2afde512f3ea6072224ff7d7f53c5b7fe2c14710cfc67ca627eb229dd9876b8bfde4dc87130e218cd5f190053afdd57d3e0f0b75114ad2c383badc9381ff3ec1af99db468fcc04e584f0d47eb614249b3caa8f0f650d5c78b16472a49dfc43e09d2e0853ac4ee478196a7de6e1c34e5a7c24e020ccf2a87f47548019d2ee806081ef36ba46d857c6341698592bcdd3dc484fc6153ab2773f0bf0f2f0ebd75a065861857a0f0b3133d9615313b1931e273eec9ffd4dcd02ea42ca55e13fe1e0162bf6d89c7fe5f8a53ec536f348cda1feca8352a2cb513f6a85aff3c8f26e249a267da0e5aa31b4410f53f126799c79d61e82782a9519aca7e734ed097fcf3af6943cd3eca7a0d653b6c0bb12b1192d31c51aa0465f79ae5fad8d9d3b7da2b52fddfd3781162d209de9c0353ab9a7de01131d3336cf3e6f4a4436ec6acaab5754914546d586479a28fc10173f74962df1365625f34dc5d3fd03525c8b55f6eb2de2a61c2e6bf6012c819339dda7b6d350f9751c9fb694eb42a4c20e04ba5b99090c467e94dd23e344e10f2751d2654307fa2bf7c43cf45ed291ab5816f59e54aa6d054bc8c12ee4541d2e188364ddba05a73c45208942519efc8c4aacdfe625c6eb4e5320ed11fced98994935d24b1c29cf5fe24ba1e2dc5161ad84a7594228773ac6d200a1f48fbac8a0ce71fdf3ff9a790493030b683d69c9739c36cd53a92c900b4d1fe620a0b21a6ff5189cfcc63d7b5e98c188d9b85c1f81519cfa1e00b0756322c0d17a8ae7835bae5668cbeeb075195a8b9c3d1a2682e1c622624b07e6cc0504920639f6c699fc4c0bcd7574c58e7c1f00568c62108126aca8ab216148ef1b7919edae37f64d0b2a41c7b176ddff29c6ebf4d8ac3907b43103550342c135c5fc2f9de821c14434c739029fd8c70807bb8fdfaff7670fcd92a9410126e2a1d572778031e9d3d3762a1e3b2a298144fc14a0d61da795c89fc2a68fa8ce5723bf9ff17f7dca6b096a632c702e4091ebcb6f20239581344228a31c2452bb9e18f60a2923f9a9006809f6b0653d1e60b700ec1cb329338babcb91aa49580a480c0e7e920e4c9c06db2c875dd9eb7ae8192ff89aecf91af37c704124fa8d12f23453fb18a7817ee7114684aa5aac0cdb43c805ee1210e50087871490c49d56053e260ef4cd408e297a84184fbeec111669343fa9bbb2e1edfb86f5cbcb087c18f26268b6b13ce028d13c395dc1d86326638f51d8938bfde583ea36a7f48cd144cb26badd19157696093ceeeaab331455ee790ccb5e0d2265f830af91e469f47a1c4edd41d769d8e38726fd174f7ef26d38d7d8c03d543eed363ff1801516480c37612a70a6d74a2938f26d6a6d5309b7cc405f56965ab07f3d077f2d8809274ce85a503c5406ea7233697a8581676aa5ca00ca371d72dc4abbc020fc4eb9e78b7602c9ad4b978d50a9c45ef688036db184512f07e46fdb989325c96733ffa256266c50e5ace9e6a38cb5b6136016a6d242169f9cfb83d2d09495fdddec731347a215c8b7e291cbada155f91294b427cf19d1291a5cfaba57ad16cad5936818a111b65415ca5c650c4de09f92b89135e7678b23f1807988ffaa32c9337bd288d889864033431e63813122309f63e33d566e15b2471a334c0977cf6f5125b319d06ae31b130554d3bc62443c7d17692f72f62b5f33ce498a5a1a23cf9848a0c7e188a1f1b66e755a7be86081c9318be43725fe4d1f59431041ed6a05c27da0244f8dc86ffd3eb81bf4a4044081cd60d03f5"})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
fcntl$getflags(r2, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001140))

04:37:49 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=<r0=>0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x9, 0x4, 0x17, 0x0, 0x5, 0xa, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x8}, 0x52a, 0x7ff, 0x7fa1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x535}, r0, 0x3, 0xffffffffffffffff, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0xc, 0x0, 0x0)

04:37:49 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0, &(0x7f0000000340)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:37:49 executing program 7:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x32, 0x4)

04:37:49 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000140)=0x2d2, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0xd, 0x20, 0x2, 0x0, 0x0, 0x20889, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x3, 0x401}, 0x4000, 0x3, 0x8, 0x0, 0xffffffff, 0x80, 0x91, 0x0, 0x80000001, 0x0, 0xfffffffffffffe01}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x3)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)

04:37:49 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x240300, 0x81)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000100)={{r1}, "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"})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
fcntl$getflags(r2, 0x1)

04:37:49 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000140)=0x2d2, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0xd, 0x20, 0x2, 0x0, 0x0, 0x20889, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x3, 0x401}, 0x4000, 0x3, 0x8, 0x0, 0xffffffff, 0x80, 0x91, 0x0, 0x80000001, 0x0, 0xfffffffffffffe01}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x3)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)

04:37:49 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:37:49 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0, &(0x7f0000000340)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:37:49 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x240300, 0x81)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000100)={{r1}, "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"})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)

[ 1062.272757] loop2: detected capacity change from 0 to 40
[ 1062.288966] FAT-fs (loop2): invalid media value (0x00)
[ 1062.289791] FAT-fs (loop2): Can't find a valid FAT filesystem
04:37:50 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x3, 0x0, 0x428d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x400}, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400010}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x200000)
bind$bt_sco(r1, &(0x7f0000000040), 0x8)

04:37:50 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x240300, 0x81)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000100)={{r1}, "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"})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:37:50 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x4, @none, 0x54a1, 0x1}, 0xe)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x101}, 0xe)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)

04:37:50 executing program 4:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = gettid()
r2 = signalfd(r0, &(0x7f0000000040)={[0x74]}, 0x8)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x6, 0x0, 0x80, 0x80, 0x0, 0x49d44635, 0x41082, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x3, @perf_bp, 0x10010, 0x2, 0x6, 0x5, 0x3f, 0x3d, 0xfff, 0x0, 0x4, 0x0, 0x29}, r1, 0x6, r2, 0xa)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0xc, 0x0, 0x0)

04:38:03 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x240300, 0x81)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000100)={{r1}, "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"})
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:38:03 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:38:03 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0, &(0x7f0000000340)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:38:03 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000140)=0x2d2, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0xd, 0x20, 0x2, 0x0, 0x0, 0x20889, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x3, 0x401}, 0x4000, 0x3, 0x8, 0x0, 0xffffffff, 0x80, 0x91, 0x0, 0x80000001, 0x0, 0xfffffffffffffe01}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x3)

04:38:03 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
fgetxattr(r0, &(0x7f0000000000)=@random={'btrfs.', '$&\x17:$.\x00'}, &(0x7f0000000100)=""/194, 0xc2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000200)="c0f7659bec560d74ba1c7cb9bb9c57709d44b82ef1e6", 0x16}, {&(0x7f0000000240)="1e6f6551c56d82bfc48aaeb1a68352ad8fd42933c29b7cc9b4437185d07e2a0d05c044b4da", 0x25}, {&(0x7f0000000280)="231d0812c1973169b4e9ae19ae5c26c2e33f3645f20f121365e93d2a431b2dc3729b27f4311cc54c92a194d931f3a8898cac1a5ef4526763287e1ed58c0b459af516d0fa26fc276be1d4037fbdb7ca16b5933cea440db2e37457d3fb92330cc8d78d7a4b55edf00e16c5fad7dcd697833e5ad5bf4d3bf510e6112de56a8d1712d12d71", 0x83}], 0x3, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}], 0x20, 0x40}, 0x4000)

04:38:03 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x1, [0x0]})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0xc, 0x0, 0x0)

04:38:03 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000140)=0x2d2, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0xd, 0x20, 0x2, 0x0, 0x0, 0x20889, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x3, 0x401}, 0x4000, 0x3, 0x8, 0x0, 0xffffffff, 0x80, 0x91, 0x0, 0x80000001, 0x0, 0xfffffffffffffe01}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x3)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)

04:38:03 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:38:03 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x240300, 0x81)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000100)={{r1}, "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"})
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

[ 1075.746874] loop2: detected capacity change from 0 to 40
[ 1075.760176] FAT-fs (loop2): bogus number of FAT sectors
[ 1075.760914] FAT-fs (loop2): Can't find a valid FAT filesystem
04:38:03 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = fcntl$getown(r0, 0x9)
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xff, 0x9, 0x2, 0x67, 0x0, 0x1, 0x49000, 0x1d, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd9, 0x430a64d0bed44872, @perf_config_ext={0xffffffffffffff80, 0x4}, 0x1200, 0x8, 0x8000, 0x0, 0x7f, 0xffff, 0xb561, 0x0, 0x9, 0x0, 0x5}, r2, 0x5, r0, 0x1)
setsockopt$bt_BT_POWER(r1, 0x112, 0xc, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x3, @any, 0x6, 0x1}, 0xe)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x2}, 0xe)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x6e8c, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2, 0x1}, 0xe)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)
r5 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x32b400, 0x0)
fstatfs(r5, &(0x7f0000000280)=""/105)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x50, r3, 0xd272f000)

04:38:03 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000000))
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)

04:38:03 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x240300, 0x81)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000100)={{r1}, "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"})
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:38:03 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x31, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000c97000/0x2000)=nil, &(0x7f0000da4000/0x2000)=nil, &(0x7f0000cb4000/0x3000)=nil, &(0x7f0000db0000/0x3000)=nil, &(0x7f0000f1e000/0x2000)=nil, &(0x7f0000ead000/0x1000)=nil, &(0x7f0000fec000/0x12000)=nil, &(0x7f0000d36000/0x1000)=nil, &(0x7f0000e64000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)="8ec908e033d1d5df68143e20965731504166", 0x12, r0}, 0x68)

04:38:03 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r1=>0x0}, &(0x7f0000000140)=0xc)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x4, 0x3, 0x5, 0x7, 0x0, 0x17, 0x9, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x1, 0x5}, 0x9cffd209ba84a8bc, 0x3f, 0x6b0000, 0x2, 0x14, 0x3, 0x2, 0x0, 0x10001, 0x0, 0xf3be}, r1, 0xd, r0, 0x2)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0xc, 0x0, 0x0)

04:38:03 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
open$dir(&(0x7f0000000000)='./file0\x00', 0x240300, 0x81)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:38:03 executing program 7:
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)

04:38:03 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:38:16 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:38:16 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setsig(r0, 0xa, 0x3a)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0xc, 0x0, 0x0)

04:38:16 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2007, @any, 0x6}, 0xe)

04:38:16 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x61, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfff, 0x2}, 0xe)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)

04:38:16 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000140)=0x2d2, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0xd, 0x20, 0x2, 0x0, 0x0, 0x20889, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x3, 0x401}, 0x4000, 0x3, 0x8, 0x0, 0xffffffff, 0x80, 0x91, 0x0, 0x80000001, 0x0, 0xfffffffffffffe01}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x3)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)

04:38:16 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:38:16 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000140)=0x2d2, 0x4)

04:38:16 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0, &(0x7f0000000340)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1089.128850] loop2: detected capacity change from 0 to 40
04:38:16 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:38:16 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
dup3(r0, r2, 0x80000)
setsockopt$bt_BT_POWER(r1, 0x112, 0xc, 0x0, 0x0)

[ 1089.153392] FAT-fs (loop2): bogus number of FAT sectors
[ 1089.154278] FAT-fs (loop2): Can't find a valid FAT filesystem
04:38:16 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:38:16 executing program 4:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x8]}, 0x8)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x2c1}, 0x0, 0xa, r0, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000000))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
flock(0xffffffffffffffff, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0xc, 0x0, 0x0)

04:38:16 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0)

04:38:16 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
write$P9_RLERRORu(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f0000000702000200242e08fc2c00"], 0xf)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000080)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)

04:38:16 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:38:16 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000))

04:38:33 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0, &(0x7f0000000340)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:38:33 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0)

04:38:33 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:38:33 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)

04:38:33 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:38:33 executing program 4:
removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'user.', '\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'})
ioctl$CDROMREADMODE1(r0, 0x530d, &(0x7f00000001c0)={0x26, 0x81, 0x80, 0x1, 0x3f, 0x9})
perf_event_open(&(0x7f0000000080)={0x2, 0xffffffffffffff42, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x9, 0x5, 0xff, 0x0, 0x80000000, 0x8160, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x0, 0x5}, 0x240, 0x461655e4, 0x1e60b52f, 0x7, 0x7, 0x9, 0x3563, 0x0, 0x9, 0x0, 0x227}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0xc, 0x0, 0x0)

04:38:33 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000140)=0x2d2, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0xd, 0x20, 0x2, 0x0, 0x0, 0x20889, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x3, 0x401}, 0x4000, 0x3, 0x8, 0x0, 0xffffffff, 0x80, 0x91, 0x0, 0x80000001, 0x0, 0xfffffffffffffe01}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x3)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

04:38:33 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)

04:38:33 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0)

[ 1105.941928] loop2: detected capacity change from 0 to 40
[ 1105.955897] FAT-fs (loop2): bogus number of FAT sectors
[ 1105.956733] FAT-fs (loop2): Can't find a valid FAT filesystem
04:38:33 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_setup(0x46ac, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000)
r5 = socket$packet(0x11, 0x0, 0x300)
sendmmsg$inet(r5, &(0x7f0000003b00)=[{{&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002580)=[{&(0x7f0000000280)="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", 0xfb}, {&(0x7f0000000380)="8b38d2ce6f25421b9eb9e8e3008c1e460caeb8e059395927bca3fa5bc1c99db6b95a3a0f439bd2fc9dfa40a0d3712170500afac06b4b2088619d17a48548cd71802792b7242e2d8c8f94d08c4f7b035af1acacca75d2c6f65f2304d86cbfdc585e85cf025dcac6e311d6986be30e657e2c610ed466cce49d185ce7995c93b759b30c649d2aea4e0ed9c30b492626b7033c8efa054820222cbb87b3dcb22df2f0ab1dc8badd9570e605995a6341dcfa44ec6121671b39955c122cb1c43ad7254d52a7bf7810262ea7db3c8189c4cc02a910181ba4722fd0fc4626", 0xda}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="78daf28e149c60793604d741e3814ae99201fbcedceb4f4d3f67f83e1b5f431d80cc5e54e9d3fd756e6b4f90e3f3ae9ad38f7e294222c690b030bd885dda7f52ffcede8f7c334bbd170c59f4f38dfd539bd077d8423bac1d0dfd7cf03270f92bd383b3cf678135d853652c8d0139e68e60b72d53ad3051b1847c7e93fb8ec1634851a6c57f38045c263a0f82c29979ecc26d1c428b59f51ddca2ebe487e70f19efbbaced5c859fe41bd4d29de0a5886b7233f2c97cfe8a303697b76d2a5803de6fef6c7b60f12c1ec66be94a59558d72f865e70118f5241887ef0e00db579c695b645c6eaaf6bceed52d18d6ffdf5a57856b2a4ebe39fc6e83d925ca2ce368c3c035dd3cea4f47451bbd7a1758f5215e99219b34058941754aa0a10d8673d96f04149714b568ef031fa4348b6a393f1c130219cf161b8555140a4f4f4057bdf94b25d0a1c95e98d484f0cf4b95eb82661ac188d0ad1e3b838136dd58eeea1b3d4857210a2568059a63af96a9aa4afbbe500c2cd8cff4f361c18c5d9e8d8ddff70a8cb9d3818d5f9994a58a92405215e304a22fc99fef914feb80a8d5d3f1c6981331943e5b4d1230934ee24deeee5948ed3d2b62095a67d2b2e5eefd4c6bab200e24429c599d28bdbf96ce0b8571e8001229824c3451f8f4865c404472ec84a239af5828fb9fe552cefca74661e90c586235a52a0708ebab206cce84d6e6a5d1449368a005e91a892ee0d5818414e980ccaed4b6ad6a3784ee755009d5e9038f54b86a968bebdca03f59f41ee3b20481cdffdf9a064841bfeed75f713aea75807d721508648f1bdb949526225194336092c87c8840041dcfe2c1c50d5cdb43fb400c4f9d6d0d9772885878c1da39d3ad3e4325fef575b545015ceeb109ed677b8aaf6016accd6961cd111d41913c28b38788b6fbf5471d0fca522ee86cbfa514b2e331acfcebaca85c45759b63d04561698a0ad779086a1f2e0f3f14bee71a2dcba00d92e43e33bb38de73f03633f90cd73b78f0cdaa4fad3a3e2ac99947d43052b8ee028539ad1f2f95df03ddecd8460f55f1e382f1bcc2f4b9e02f2d7002fc140f2302b0a7ec077ff209ae2a5f521704375ce59e901a5120e54e00d988f25970392a35a8d989fdefd7bfaa5f635cfbf53cba838cb00364904d59cf767f1c60e62a6d8991c33716ed06ae5e519441faeca8c1d44260fd9eb5b9605206ba58f395700466d78749398d5cd81e037e39dd1ddc405526af83e2122a66ff34b4a8d7c1d658db67e579d4e936e858eb49097a7ea47e763132237e6c1c615d984f3673d857297f5a8e1ca2ff9a9dc4d3ef26bfd63bb4dfcb386e2edf399d64857e0e8eb98b952f3f7ea2cecfc4b9e95eb9a66a39f879dc87d7a0f447967c007e152a0398910ff97d2d44e452c4d06b1cae2ad9d282818ef1168899a0d86bb2f5a484eb78a4934c3094215010d706cf1e87b9f0393f712c5d18799eec6ef0561ad67f603c47d3b583c64dd9e7eef1d471c1890582f2855e87a1cd0f5a301c3296e30595aa4d64b5227102d1603894bab982d87e958c5575927c6e5782bc8b8544f666868d5548c6bd5de92b7f8a3be566f03b25a26a27b2d10e0c38aede66ad08060d8e968873cc41034fc23b07484ab1393576d7a1705e24a8a467ac48a7234360c987ec94ace2064d0eb714923fb3f2ccafc83c54df6983775efe63c5a8fa9f17eb66cc26d821ed63aaf68658fb779d592c4cd1df898aa5f4c4a42bbe76c3d6c63531199a0f25aaf0396d0665d70e3ca6c9b18b4f8c04419b3c0f3680ad3d2bc1c3ddbc042e7e799ebfe4de1574ce833a06ee76827b0c549bb34f604fecc4b638b4859047d2556b90d3b27d5f5e268913e2579cb538a160d374871812b88b1b45f2dbbd71f50a9735c0fda43933fa1e6f2a15ea9c30e6a6df33f78a4067c22bbc7fec8db98e051d7e83ed4a8c6ab6e4960e6bbdea3ae656d8ae0a11cd8b146d5949ab5ecc9fcf8b5a0cfb106e88c511650202ca500bff7c4467e01094d6becacd991ba0452a01215bbf916e5aa7f8b8845bb62fad69ef4303ecc37174e4456d4bbf443941bbb7f1cdb1eb5b3be4ab78d9f409430c7cfed07045bc20ed572f2b4630ed232abaf1701ec8adda1316620ce041b3d597104057cd6fa68a67c3705d721aa109b5cee7935d3d3ca9d445812d51819a1870e4fab6e8cc9f1e7c7afa4d91c9bf790bb2bb8bf76983141a384b7d5da3ee7d0a23592d0c851b48fa60dc3cb4177be8abaeb6cea5b7c64ce87dd43a461ec55d3fffe62120ce60d50fec289ea35ba2b97ee9607bc83044ce910f8549e4acb92cfee6ec1e961d705b3ae2858c64f74ab391a0beada4b196f902a1fcd6f65ecb9de32a26705969662c2ca01fa916faad4f2f062e717e15c718a44f9041a24b2fa7f6bbbd7e90b2414df9dfecef1e0be80b7874274c2d2f6b4ead594b36a87061ae60f38dc5fd055fc9c1e9ecb286678a91b6d8bd01203380c36837096861bc078f9489de99148575f5813759c3d6672e48827a178e66858338ca1bb53c0c3b56f6e91f525ff15ca00151cee49818b84dc0f092d15d60de53f81af4175379de9b9e039657af4f9b95418bdd0f11b38ebc888c2fce4a67798b801f099d820566a3ca75b0f0510bb4ee47f926a996fd23dac98cbe7985e105ac7649de7063a492d225358b3efb2f179093ba55c6bdfe6a3d00fe54517df1489bd0b9606c986ebc94ffeb320191222bcaa9b28ebd41c9d21c3c92eec25b30560ea06026bf8ed32be5498016ad0da576a00880667a4cc08fd8e836fbd83b017dfdceb8afc483fd89c8d3465fcbfffb384039d9c1c6a57f53cf2e4e307fe7d1f915cd5286fa51b48932db9cb55501690143159a2701d6027d5d4cb995ab3958a6f3cf9c7aefde1e8c97dcb172be1a7a29f7f71d108801fc517598b2a0101f10ddb7dce6fd47bd8d22fb5a3cef6342a21dfe404f49205e836701c559f4077578fc75a958edeaf05266645499cd879bba0d04f3438f660f9da77058995d444e8f475dc38c7b54fa18983c4bae86756151812429f0432b012c630bddd7f0163565b22cabcc05d32461ece7472458825d020c909630969d20b0e9a540aea101a649e978b32786c803608e305c3c7910e329902b1e8c88c463ea76e56432e092753de944311805b05ff879bbd7ce23196e5971d937b03d3b297a483d5a74040d6fb1913143dad698bd034af1b35875a0d8513826426e712f104c61d862e1cb27d417311ae8642a68a4223124530776143bec9af4edaf89690de907981050d8beeb4ae678a451684631715e00d68c3f660e2470a679c5d3afce2517b3b133faf1847523e1677858b2811b8bf6964f378e1bfbedf2f7e0b1b1c05780afe7cfb05ced213d45ce0ff9cc734bf49d5977ebbc36aa3049af9171136cb266582cdd7fe4d640a5793e1d0896a5e0c7010f742fa066d0faf4b789dc1786b31d747477f2a3ead78e8cb09fcd18a38753b41bf19ef30c5b373072d9d01dc5273b58bc1ab5fef1e8d60775fdfdec68f5bc9b1aef70dcc18dce7dff87dfc3aec93679b92c20a00bb7f54293981dd6aae50f48288d75962f9b7b3be4d19817618f208784a11bd0d12f60d886682e00033c32ab58798fd8cc4ab7399a4ede762833fa195b4fe0b215b9e968ac9c740c6697b2dbde6f1bd7ba238a1f5266170dc585418c4f060b2738083a3df8ffbf25645758f3506788fb5a85b8387c8e7a2fb5fe78d7b02cfa71e7c2efbd8f71cf90cf4def5c61598dcad717183563df98fac8c5c08c4ffa870acc13620c2facd92fa08faec0951b40c186f33ee6c8873d661a0ce28d5b047ba4196346a44ca573cc69ed17720d42ff8e5df7dc82d04006ddb64af7ab4d7836ec8353b8fabded2dca365d638606438f1750730c00f7b829ff18cc019a730b06a64273b97949045b03249bb17d9d12ae7ea217488b7229353d86948b50f6ca8e1bdf18132e626a999b78f0bf7cc3fdb2fefa625b7f650f2d91ea792296de390b0516b58ee852a0ff3e6fa2eed2e87e694f0c87932119ead89d86afd40c4fe37c8b894c55cefa28fed5111076f4e5c4a6e479702e7cac6a2fd071c630bad51b8e5c138b9fa09ca6f71e51e623ccdf2640355e81b6dc6c18dbdd79d7e5ffad39187915bd90bd86cb25c96c26c597188f61962f3cbadbd2025ca754b8425ff38f0dc436a9d5a65e213abf81a50378dc929297a006563e84fe563324ea9dfe42bd9eecaf9a3dab91ca0c7929aae8512238346c97b49c688c2f009a7d9cb68f6386276557f5ec4a1d004fcedfe0ce110fa2ab6c773d687103251ce2b6421026f490b5995631a4f92a4042d8c5da48a64195be9b761749850832885fc2b3487c9679fca3e7d169d07c62fb9687a7153c854f16cc92e4338d6f3263ad07a61ca8fe091e740602c926b936c1828396f7fd9ac47aac26048739a0924060643197fb9501947713d948b5e4db6a320da471893464f45ba6cac53aef7b1d20524b007e1bc0d956ef48ea6378e02442752cb2c46ec911d29d9fdde2239ed9ea4fadb3149d24b6999e6a7ab2db9227c0feadab92c67c8b674aefe25135d950efbefa7db3a4d6047a5a8fc4e6af548e26801347fe57d0887504c8cfa18a29c4d53eea37384baa43017ffac0cc14655ea1292b5d4caba447ae5996dcb5d25b6769dbc16d29158a47c5d0bde1b51676f286cfceb51d68f31e129132b37539311df923bc85951e778241ee2f12077235fcbebd25394fc025904c16f3d16189a5611462894189488bf558404c5e7c92ca358849b923b9baad87c18b4f8d3c50ee7448160ee6eec728df59c43932e9a4392eb85124ad5af848ff8fd96f58aec4126c55ac2f3a4fc23f690a1135b317daeeb98dc2401ee8fd840fe6dd8269034e507eabf14a3801a8eb549a1ef36ed70a2273ebfac6a298d844082f0acde6271d0a6299862e6780ae55d89ef2e98f7ef82cf8a2d6e1c65ddae40c62fc116b30fe8b3108fd6613f4386f4a9d339485556caff331fc04814fc7ad41733e3ad593ce700db3596c8b50dcb8687e582e3c3bd70d1ae80ede3a49bba822e8cc26fb65b36caa16706dccf8db07e0ceadcfde453f46aa47a30b0da8ce53e41af58b979f3673d07a5a74b59dd5e78be842033eef61d87441f4309a502cf4f86c95a8bd61a2aeadeccb59df184a6f46def23048b87c93c739225fb5288385c356710dbe3a1b2d99f06c9aa144d4f5ebe660433fd510bfa8f4fcc16cbf9ed90cfcee44c3234a3d9cc133dee91cf21bf916e8a7a9223a0fd30142e847d2c622977a9fa52d0e6a4a83d81c92c137996dbc1c085382cb02873d6f3df8b79ce4a2b17f69b8237ffa154c4aeed660e21db33bfcabe675e41123cda634b02a82bd4a42e83d1076a9f4469a43dfb0191e747d46dfddb9edb125f6310c6004ff52cd6720b26d3a7f721427fdd8e38c91de20c0237d77900dabb942932b2ab76b24c8647de5967c70686e031ce931da43595212556414b657ac059414faa6b8c061411c96e47e1eb8114ac84150026159b0db73b9c92a775dd3d895347dbb8077480c6882d711a5a582e99a8ceaf6a7f4d4a006c7b2868414317018eb5616a6e9616a644202da32a4c87b72d40a7d3d4ab44b94314c484dc155ee7fc6e57b5798a3c979dd846576e4f911af58ea1029d70ffba67c5cb4d18fd2489803d4fdcaedba7f99fc968b610147dd6fdde99f77477adb4eacc2b41cd0fe6db3a30f8b0cbf5e672d99187e14eac3358fcfbef06db2d3", 0x1000}, {&(0x7f0000002480)="60dbace781cb673195098148f1627cad51adc4e00abc888fb73ac885ada7a506139cfdb8779e0ccad3baa9e96bc32c231f8ee2c10b36eb4b90913daca4941302b0791cd2dc18623519edb22a0b069386939eea49261d12486d6631089c1aaa9bee13bb598f1f64b1502e3cab1559fe5b85f026dd114082aba5ea8878534fed372fa6efeae4c994e22ff6034fc3288420bd3e1e234ba4419246cbcb43be49f54c8406192106a0f0b3c83b188e77a84401c7f506ae63049b6c913f5a70e2131058cfb5ae2e608dd8e87a49c5515a95bffcee69720caaffe1886f6e9e0ec1af6b805dd9cb37", 0xe4}], 0x5, &(0x7f0000002600)=[@ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6e}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_retopts={{0x40, 0x0, 0x7, {[@generic={0x44, 0xa, "78f5058c830609ba"}, @timestamp_prespec={0x44, 0x24, 0x54, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x41}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x39}, 0xfff}, {@loopback, 0x4}, {@multicast2, 0xfffff801}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x48, 0x0, 0x7, {[@rr={0x7, 0xb, 0xab, [@loopback, @remote]}, @cipso={0x86, 0x14, 0x1, [{0x5, 0xe, "1ea8726583d5043a5d082892"}]}, @timestamp_addr={0x44, 0xc, 0x2e, 0x1, 0xc, [{@empty, 0x4}]}, @lsrr={0x83, 0xb, 0xdd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}], 0x100}}, {{&(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000028c0)=[{&(0x7f0000002700)="3b39fe8b2c85dbdfdacba3bf2a6bcee240b62a95c869ea610d2b3f53da87f838182812b6a27c4b96e769755a3118fb19c3de213e9af1615d7283727ea47dc2eb389e1558ff7925f16e5b8f7d93b284db90e117f6bf837b853593e8c7cd2d9a02f0f02e8718f22b57e5a9f8a42148d42bf2a13b7e473c1e7261405595db02eacf233d181485397c5cb52418a5776d526ee39743f76d40b8fc1bda8c9bbeea6631fbe2c46979f334b917a7e2f0c7fc62fec282edf38f2e7bd2", 0xb8}, {&(0x7f00000027c0)="a872912e5448af9512f8341b369e21282e9558f7ab065970f8132b7b0b4df906e00acc7b81f0f83ec72cdff8f99b0ab6d70808829f643f1409fa4054ba7d4cea7ef370bc1dff6bc6344563365c11861fbdbce83b2826a16a0728462f77cded86fd4e49d07f336ff3d5ab216746e7fd511c651b09a4dd02b08a09f26982c58d59603ffbacdd49bae27101c276811ab0a195c948be5532036a5917496e72767574b18434a238a3ccfaa56d68c77c4d2a99972bd1c806942f4b9e692b0283269a572605ae21bca53b678cd9ddfb1b60cbb36240dbe4733e92db27d534a4fcb98eef4fb87ef3b7488fa27bdec028", 0xec}], 0x2, &(0x7f0000002900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @private=0xa010101}}}], 0x20}}, {{&(0x7f0000002940)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000003a80)=[{&(0x7f0000002980)="b4ec4251b7112652f078b64bd4626384a07b18b9839398b8d23a9a13cace4bde21c7a00e7daa380d141fa6fbd473e8174ffa3e3cb04516236232c97298d3cfb1aabf5e11bb2cd93659d09907eddd2d818c80f5", 0x53}, {&(0x7f0000002a00)="06660e14102f0ea1819ee31afdfa23b3b9eeb77a3a585dccc1bf3b5072a4b1b928e12af153f44014d73f5eb68d466cbea901f98e318f97dff228493e1a349f1c5217e3eece61c30e58c9d5a78c7e741e240ae02ea6e6ee1bb5c1e9ed9bf5893f01c8e59bc779017e3a3a6d9e", 0x6c}, {&(0x7f0000002a80)="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", 0x1000}], 0x3, &(0x7f0000003ac0)=[@ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff7}}, @ip_tos_u8={{0x11}}], 0x40}}], 0x3, 0xc0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$sock_int(r7, 0x1, 0x1, &(0x7f0000003bc0)=0xef, 0x4)
syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x1, &(0x7f0000000000)=[r0], 0x1, 0x0, 0x0, {0x0, r6}}, 0x4)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)

04:38:33 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:38:33 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x7, 0x6, 0x5, 0x0, 0x800, 0xf618, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1d1, 0x2, @perf_config_ext={0x1, 0x10000}, 0x5d020, 0x1, 0x0, 0x6, 0x8, 0xfffff9d9, 0x3f, 0x0, 0x6, 0x0, 0x7}, 0xffffffffffffffff, 0x1, r0, 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000100))
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
close(r2)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000340)={0x3, 0x93, 0x3ff, 0x2, 0x5})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x40, 0x3, 0xe3, 0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x38d5, 0x0, @perf_config_ext={0x1, 0x4}, 0x40000, 0x4, 0x66f, 0x0, 0x3, 0x7, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0x9, r1, 0x1)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r5=>r2, {0x2}}, './file0\x00'})
kcmp(0x0, 0x0, 0x6, r4, r5)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x58}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xc800}, 0x4004010)

04:38:33 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0)

04:38:47 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = signalfd4(r0, &(0x7f0000000040)={[0x80000001]}, 0x8, 0x80800)
read(r2, &(0x7f0000000140)=""/74, 0x4a)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0xe)

04:38:47 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0)

04:38:47 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:38:47 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x5, 0x40, 0xd1, 0x0, 0x0, 0x2, 0x808, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x3, 0x7}, 0x2, 0x10001, 0x2, 0x9, 0xcc, 0x40, 0x400, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0x6, r0, 0x4)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3, 0x3, 0x9, 0x0, 0x0, 0x6, 0x8, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10001, 0x0, @perf_config_ext={0x80000001, 0x5}, 0x2281, 0x400, 0x7adc3115, 0x3, 0x1, 0x5, 0xff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0xf, r0, 0x8)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x6, 0x3, 0x3, 0x1, 0x0, 0x81, 0x104, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8d, 0x7fff}, 0x800, 0x57, 0xf5e3, 0x4, 0x6, 0x6, 0x81, 0x0, 0x3353, 0x0, 0x80000000}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x0)

04:38:47 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0, &(0x7f0000000340)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:38:47 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000140)=0x2d2, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0xd, 0x20, 0x2, 0x0, 0x0, 0x20889, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x3, 0x401}, 0x4000, 0x3, 0x8, 0x0, 0xffffffff, 0x80, 0x91, 0x0, 0x80000001, 0x0, 0xfffffffffffffe01}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x3)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)

04:38:47 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

04:38:47 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

[ 1119.894580] loop2: detected capacity change from 0 to 40
04:38:47 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, <r1=>0x0})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000e2b2d5432a4fb8c029eee99c720c3f7a1bb9a232d6d502aaf1a5a103b1f09d7a01abc6c123", @ANYRES32=<r2=>r0, @ANYBLOB="b1f9ffff000000002e2f66696c653000"])
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x8, 0x8e, 0x79, 0x9, 0x0, 0x4, 0x6200d, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x7004, 0xbe9, 0xa2, 0x0, 0xfffffffffffffbff, 0x200, 0x3, 0x0, 0x2, 0x0, 0x400}, r1, 0xb, r2, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)

04:38:47 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0)

04:38:47 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000))
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)

04:38:47 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:38:47 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0)

04:38:47 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, <r2=>0x0})
r3 = signalfd(r1, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, r2, 0xb, r3, 0x9)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xfd, 0x8, 0x7f, 0xfc, 0x0, 0xffffffff, 0xb0000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfff, 0x2, @perf_bp={&(0x7f0000000200), 0x2}, 0x10000, 0x5, 0x0, 0x3, 0x1, 0x8, 0x200, 0x0, 0x6, 0x0, 0x6}, r2, 0x7, 0xffffffffffffffff, 0x13)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r4=>0x0})
r5 = signalfd(r0, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
r6 = perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, r4, 0xb, r5, 0x9)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x14, 0x3f, 0x0, 0x0, 0x0, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x1f, 0x6}, 0x144, 0x1c0000000000, 0x2, 0x0, 0xd0, 0x4, 0x47, 0x0, 0x2, 0x0, 0x100}, r4, 0x10, 0xffffffffffffffff, 0xa)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={<r7=>0x0}, &(0x7f00000001c0)=0xc)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x6, 0x0, 0x20, 0x0, 0x2, 0x20, 0xe, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x238, 0x0, @perf_config_ext={0x1ff, 0x5}, 0x400a0, 0x4, 0x10000, 0x7, 0x3, 0x4, 0xaf, 0x0, 0x2, 0x0, 0x1}, r7, 0x7, r6, 0x2)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r8, 0x112, 0xc, 0x0, 0x0)

04:38:47 executing program 7:
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x2, 'netdevsim0\x00', {0x9}, 0x6})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000001340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x1240, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6d}}}}, [@NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffff}, @NL80211_ATTR_FRAME_MATCH={0xac, 0x5b, "e811653d6fbb4b06b942170cb1cdb4b93635aa2863f6a505c8fa1eaf43dcd7f262b7305dae2c8a40b4d4f9f415e970d4a55ab0bd803c72d9d064af42f16d897d118391f3ab68f38e52df0a99f999961e320f44ae0fee096b8dfe7a5b7fde04166b4445b99ed668d8a07b6415b5eef61a0c0b011ec3e756e7b8eeb8122097b2dca5fe9bfd6d3c3a48c3c9f4a4ebd495d698f4b337252782fb80f429b51ce36288c3180c67638c8caa"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x8e, 0x5b, "b9cb36f9790fe007edbf8e3183d21491830697dbfc1a8416ef7d240fdfa252d1a66afe6476614227b2c1d4e658c25c268ba71d0f393de81cb0e435cd15872633fc15788b2f01a7f1da0ad96d8f68e360c4c95391a31fca434f94bcefa95da55ba33942e741e40a12adcbdcf19ebfcee171855b88ebe455ce76b3acd492a8e08bc5ab54536852266da66e"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8000}, @NL80211_ATTR_FRAME_MATCH={0xb8, 0x5b, "b8aac20073fc338548e2087b1cb1e7309982ae4ed7c2a6c31d9d348a19cc4b95993b3ec39714005cf12ee210df11596202021b2655f9b59ad69b85ffb47f4c9e24d8e622d35c57dbc417b54fa33ac1ed01a1b97c0b253c462894c5ec8b356befb60d062e5c589c5b87d5402de4faa272140651593682171f8caadea9aa76e5c1a8da7f40e1e2ca7b7713009aa938fc13a92bc302c6ac412f66c19a1d8e27307bb41168400738aea1e54725d861ae859ac87c7ae5"}]}, 0x1240}, 0x1, 0x0, 0x0, 0x40000}, 0x4)

04:38:47 executing program 1:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:38:47 executing program 7:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '#\x00\b', 0x8, 0x33, 0x0, @local, @mcast2, {[], {0x0, 0x0, 0x8}}}}}}, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)

04:38:47 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0)

04:39:01 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0)

04:39:01 executing program 1:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:39:01 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000140)=0x2d2, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0xd, 0x20, 0x2, 0x0, 0x0, 0x20889, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x3, 0x401}, 0x4000, 0x3, 0x8, 0x0, 0xffffffff, 0x80, 0x91, 0x0, 0x80000001, 0x0, 0xfffffffffffffe01}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x3)

04:39:01 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:39:01 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {r0}}, './file0\x00'})
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000040))

04:39:01 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0, &(0x7f0000000340)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:39:01 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:39:01 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)

04:39:01 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0)

04:39:01 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x68, 0x4)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {<r1=>r0}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r1, {0x1}}, './file1\x00'})
setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040)=0x2, 0x4)

[ 1133.617315] loop2: detected capacity change from 0 to 40
04:39:01 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0)

04:39:01 executing program 1:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:39:01 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
fsync(r0)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)

04:39:01 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x3)

04:39:01 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0)

04:39:13 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0, &(0x7f0000000340)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:39:13 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x9, 0x1)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), 0x4)

04:39:13 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:39:13 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0)

04:39:13 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700)={0x0, ""/256, <r2=>0x0, <r3=>0x0})
r4 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000070280)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x5, "af2f1a9317bc6f"})
ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000100)={r2, 0x372})

04:39:13 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:39:13 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:39:13 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000140)=0x2d2, 0x4)

04:39:13 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:39:13 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0)

[ 1145.739751] loop2: detected capacity change from 0 to 40
04:39:13 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000040)=""/33, 0x21}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/64, 0x40}], 0x3, &(0x7f0000000340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r2=>0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000000400), 0x6e, &(0x7f0000001500)=[{&(0x7f0000000480)=""/110, 0x6e}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/152, 0x98}], 0x1, &(0x7f0000001640)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}], 0x3, 0x40010000, &(0x7f0000001880)={0x77359400})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x3, 0x1, 0x2, 0x0, 0x658c, 0x8001, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x2002, 0xf15, 0x40, 0x6, 0xeba, 0x0, 0x9, 0x0, 0x5, 0x0, 0x48000}, r2, 0xd, r0, 0x8)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
syncfs(r1)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0xc, 0x0, 0x0)

04:39:13 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0)

04:39:13 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:39:13 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006c80)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/40, 0x28}, {&(0x7f00000011c0)=""/235, 0xeb}, {&(0x7f00000012c0)=""/75, 0x4b}, {&(0x7f0000001340)=""/188, 0xbc}, {&(0x7f0000001400)=""/93, 0x5d}, {&(0x7f0000001480)=""/150, 0x96}, {&(0x7f0000001540)=""/89, 0x59}], 0x8, &(0x7f0000001640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f00000016c0)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/39, 0x27}, {&(0x7f0000002780)=""/70, 0x46}, {&(0x7f0000002800)=""/62, 0x3e}, {&(0x7f0000002840)=""/111, 0x6f}, {&(0x7f00000028c0)=""/134, 0x86}, {&(0x7f0000002980)=""/161, 0xa1}], 0x7}}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002ac0)=""/167, 0xa7}, {&(0x7f0000002b80)=""/104, 0x68}, {&(0x7f0000002c00)=""/95, 0x5f}, {&(0x7f0000002c80)=""/237, 0xed}, {&(0x7f0000002d80)=""/218, 0xda}, {&(0x7f0000002e80)}, {&(0x7f0000002ec0)=""/118, 0x76}, {&(0x7f0000002f40)=""/71, 0x47}, {&(0x7f0000002fc0)=""/194, 0xc2}], 0x9, &(0x7f0000003180)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000003240)=@abs, 0x6e, &(0x7f0000003300)=[{&(0x7f00000032c0)=""/59, 0x3b}], 0x1, &(0x7f0000003340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [<r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000033c0)=""/207, 0xcf}, {&(0x7f00000034c0)=""/163, 0xa3}, {&(0x7f0000003580)=""/26, 0x1a}, {&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000045c0)}, {&(0x7f0000004600)=""/35, 0x23}], 0x6, &(0x7f00000046c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000004780), 0x6e, &(0x7f00000058c0)=[{&(0x7f0000004800)=""/140, 0x8c}, {&(0x7f00000048c0)=""/4096, 0x1000}], 0x2, &(0x7f0000005900), 0xfffffffffffffe16}}, {{0x0, 0x0, &(0x7f0000005980)=[{&(0x7f0000005940)=""/39, 0x27}], 0x1, &(0x7f00000059c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000005ac0)=[{&(0x7f0000005a00)}, {&(0x7f0000005a40)=""/90, 0x5a}, {&(0x7f0000007080)=""/92, 0x5c}, {&(0x7f0000005b40)=""/38, 0x26}, {&(0x7f0000005b80)=""/4096, 0x1000}, {&(0x7f0000006b80)=""/19, 0x13}], 0x6, &(0x7f0000006c40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x8, 0x12104, &(0x7f0000006e80)={0x77359400})
stat(&(0x7f0000005a00)='./file0\x00', &(0x7f0000006f40))
r4 = perf_event_open(&(0x7f0000006ec0)={0x1, 0x80, 0x65, 0xff, 0x81, 0x8, 0x0, 0x8, 0xa0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x3ff}, 0x102, 0x5, 0x7fff, 0x7, 0x7, 0x7, 0x0, 0x0, 0x8000, 0x0, 0x75c}, 0xffffffffffffffff, 0x0, r0, 0x8)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x40, 0x9, 0x5, 0x7, 0x0, 0xc254, 0x50, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0x1}, 0x200, 0x5cb2, 0xff, 0x9, 0xfffffffffffffff9, 0x1ff, 0x9, 0x0, 0x100, 0x0, 0xf0d9}, r3, 0xffffffffffffffff, r4, 0x3)
setsockopt$bt_BT_POWER(r1, 0x112, 0xc, 0x0, 0x0)
r5 = accept$inet6(r2, &(0x7f0000002e80)={0xa, 0x0, 0x0, @empty}, &(0x7f00000045c0)=0x1c)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000006fc0)='.\x00', &(0x7f0000007000), 0x0)

04:39:13 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:39:13 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0)

04:39:26 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:39:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(0x0)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0, &(0x7f0000000340)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:39:26 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)

04:39:26 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x7f, @any, 0x1, 0x1}, 0xe)
r2 = inotify_init()
sendfile(r0, r2, &(0x7f0000000000), 0xfb)

04:39:26 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xc)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)

04:39:26 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0)

04:39:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:39:26 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

[ 1158.723977] loop2: detected capacity change from 0 to 40
04:39:26 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={&(0x7f0000000180), 0x2783ebfac4244416}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000140)=0x8, 0x4)
r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x80800)
bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x2, @none, 0x8, 0x1}, 0xe)
r2 = openat$full(0xffffffffffffff9c, &(0x7f00000021c0), 0x20140, 0x0)
connect$bt_l2cap(r2, &(0x7f0000002200)={0x1f, 0x4, @any, 0x4ef, 0x1}, 0xe)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)={0x2, 'ipvlan0\x00', {}, 0x5})
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)

04:39:26 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0)

04:39:26 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:39:26 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000))
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)

04:39:26 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:39:26 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:39:26 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:39:26 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

04:39:26 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0)

04:39:39 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:39:39 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:39:39 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
r1 = accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x80000)
bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x7f, @any, 0x5, 0x1}, 0xe)

04:39:39 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000e58eb5d9ccdcf22caaaa153403d91800000000f483283eeae9963385ebb5c9f52e1a318709", @ANYRES32=<r1=>r0, @ANYBLOB="02000000000000002e2f66696c653000"])
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='system.sockprotoname\x00')
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, <r3=>0x0})
r4 = signalfd(r2, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, r3, 0xb, r4, 0x9)
r5 = clone3(&(0x7f0000000380)={0x50040100, &(0x7f00000001c0), &(0x7f0000000400), &(0x7f0000000240), {0x23}, &(0x7f0000000280)=""/45, 0x2d, &(0x7f00000002c0)=""/119, &(0x7f0000000340)=[r3], 0x1}, 0x58)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000000100), 0x1)
kcmp(r5, 0xffffffffffffffff, 0x4, r0, r6)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendfile(r1, r7, &(0x7f0000000040)=0x1f, 0x179)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r8, 0x112, 0xc, 0x0, 0x0)

04:39:39 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0)

04:39:39 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(0x0)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0, &(0x7f0000000340)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:39:39 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

04:39:39 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:39:39 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0)

04:39:39 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:39:39 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/655])
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1)

[ 1172.323764] loop2: detected capacity change from 0 to 40
04:39:40 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0)

04:39:40 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x30, 0x4)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x3ff, 0x8001, 0xc, 0x77, 0x3, 0x4, 0xffff}, 0xc)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r2 = socket(0x25, 0x800, 0x5)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000080)={0x5, 0x200, 0x0, 0x0, 0x0, 0x95, 0x9d}, 0xc)
r3 = syz_open_dev$vcsa(&(0x7f0000000340), 0x9, 0x101000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0xfff, 0x969}}, './file0\x00'})
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000100)=""/213, 0xd5}, {&(0x7f0000000200)=""/250, 0xfa}], 0x2, 0x94, 0x800)

04:39:40 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:39:40 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:39:40 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0)

04:39:40 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:39:40 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0)

04:39:54 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)

04:39:54 executing program 6:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:39:54 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000180)=0xffffffffffffffff)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$sock_proto_private(r1, 0x89eb, &(0x7f0000000100)="03cd561b505779d9c43cf1e52110ddfb12c02e58df704b650ccab6f0c9e2a62fa8d37d5e6597352381c00baae6910db9a426b719c7b2e8cf7b16c521b6a2566a9213b9ccf77ac9be98b597a1643ffbea344bd059e0e71046cb226978d93ed7b13f8bb9eadf0f1369325ebafc8cb66171c94285d3aac3ac43ce1277")
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x8, 0x1000}}, './file0\x00'})
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7fff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xdb87}, 0xe)

04:39:54 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:39:54 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, <r2=>0x0})
r3 = signalfd(r1, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, r2, 0xb, r3, 0x9)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xfd, 0x8, 0x7f, 0xfc, 0x0, 0xffffffff, 0xb0000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfff, 0x2, @perf_bp={&(0x7f0000000200), 0x2}, 0x10000, 0x5, 0x0, 0x3, 0x1, 0x8, 0x200, 0x0, 0x6, 0x0, 0x6}, r2, 0x7, 0xffffffffffffffff, 0x13)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r4=>0x0})
r5 = signalfd(r0, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
r6 = perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, r4, 0xb, r5, 0x9)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x14, 0x3f, 0x0, 0x0, 0x0, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x1f, 0x6}, 0x144, 0x1c0000000000, 0x2, 0x0, 0xd0, 0x4, 0x47, 0x0, 0x2, 0x0, 0x100}, r4, 0x10, 0xffffffffffffffff, 0xa)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={<r7=>0x0}, &(0x7f00000001c0)=0xc)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x6, 0x0, 0x20, 0x0, 0x2, 0x20, 0xe, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x238, 0x0, @perf_config_ext={0x1ff, 0x5}, 0x400a0, 0x4, 0x10000, 0x7, 0x3, 0x4, 0xaf, 0x0, 0x2, 0x0, 0x1}, r7, 0x7, r6, 0x2)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r8, 0x112, 0xc, 0x0, 0x0)

04:39:54 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:39:54 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(0x0)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0, &(0x7f0000000340)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:39:54 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

[ 1186.418682] loop2: detected capacity change from 0 to 40
04:39:54 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syslog(0x2, &(0x7f0000000400)=""/92, 0x5c)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)
syslog(0x3, &(0x7f0000000040), 0x0)
syslog(0x0, &(0x7f0000000100)=""/219, 0xdb)
syslog(0x4, &(0x7f0000000000)=""/51, 0x33)

04:39:54 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:39:54 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:39:54 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000e58eb5d9ccdcf22caaaa153403d91800000000f483283eeae9963385ebb5c9f52e1a318709", @ANYRES32=<r1=>r0, @ANYBLOB="02000000000000002e2f66696c653000"])
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='system.sockprotoname\x00')
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, <r3=>0x0})
r4 = signalfd(r2, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, r3, 0xb, r4, 0x9)
r5 = clone3(&(0x7f0000000380)={0x50040100, &(0x7f00000001c0), &(0x7f0000000400), &(0x7f0000000240), {0x23}, &(0x7f0000000280)=""/45, 0x2d, &(0x7f00000002c0)=""/119, &(0x7f0000000340)=[r3], 0x1}, 0x58)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000000100), 0x1)
kcmp(r5, 0xffffffffffffffff, 0x4, r0, r6)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendfile(r1, r7, &(0x7f0000000040)=0x1f, 0x179)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r8, 0x112, 0xc, 0x0, 0x0)

04:39:54 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:39:54 executing program 7:
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x880021}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, r0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x7fffffff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6}, {0x8, 0x15, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
r1 = socket$netlink(0x10, 0x3, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0xe8)
syncfs(r2)
ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000080)={0x5, 0x6, 0xff, 0x40})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x160, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x805}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x4)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000002cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)=ANY=[@ANYBLOB="6800da98", @ANYRES16=r3, @ANYBLOB="000326bd7000fcdbdf254a000000080001007063690011000200303030303a30303a31302e300000000008000300010000000f00a8007365636f6e646e616d6500000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000003200)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000031c0)={&(0x7f0000002d80)={0x404, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x3a0, 0x8, 0x0, 0x1, [{0x328, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c8, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x9}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d37e7b40f4d8de15739f8bdc428a37e08ce7baef62ddcb18ad483a66761b870c"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e5f7c7e8ac59543af466f70feb24d7ded91af66248cc9e877a8567ba200dca06"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c63d14fc6e148fc3dc9e60f2a1ea3cea0b5f1907f25e2950d7dc5ea5418992ba"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x404}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000005)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000002d00))
shutdown(r4, 0x1)
clock_gettime(0x0, &(0x7f0000002a80)={<r5=>0x0, <r6=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002900)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/165, 0xa5}, {&(0x7f00000003c0)=""/106, 0x6a}, {&(0x7f0000000440)=""/132, 0x84}, {&(0x7f0000000500)=""/145, 0x91}], 0x5}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/32, 0x20}, {&(0x7f0000000700)=""/133, 0x85}, {&(0x7f00000007c0)=""/230, 0xe6}, {&(0x7f00000008c0)=""/173, 0xad}, {&(0x7f0000000980)=""/80, 0x50}, {&(0x7f0000000a00)=""/124, 0x7c}], 0x6, &(0x7f0000000b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000000b40), 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000bc0)=""/91, 0x5b}, {&(0x7f0000000c40)=""/24, 0x18}], 0x2, &(0x7f0000000cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000d40)=@abs, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/82, 0x52}, {&(0x7f0000000e40)=""/226, 0xe2}, {&(0x7f0000000f40)=""/79, 0x4f}, {&(0x7f0000000fc0)=""/125, 0x7d}], 0x4, &(0x7f0000001080)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000001100)=@abs, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001180)=""/154, 0x9a}, {&(0x7f0000001240)=""/159, 0x9f}, {&(0x7f0000001300)=""/69, 0x45}], 0x3, &(0x7f00000013c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001440)=@abs, 0x6e, &(0x7f0000002800)=[{&(0x7f00000014c0)=""/158, 0x9e}, {&(0x7f0000001580)=""/191, 0xbf}, {&(0x7f0000001640)=""/112, 0x70}, {&(0x7f00000016c0)=""/7, 0x7}, {&(0x7f0000001700)=""/84, 0x54}, {&(0x7f0000001780)=""/69, 0x45}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x7, &(0x7f0000002880)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}], 0x6, 0x40000120, &(0x7f0000002ac0)={r5, r6+60000000})
getsockname(r7, &(0x7f0000002b00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000002b80)=0x80)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002bc0)='/proc/schedstat\x00', 0x0, 0x0)

04:39:54 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:39:54 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), 0x0)

04:39:54 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), 0x0)

04:39:54 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:39:54 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:39:55 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:39:55 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(0x0, &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0, &(0x7f0000000340)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:39:55 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), 0x0)

04:39:55 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000180), 0xfffffffffffffff7, 0x10000)
listen(r1, 0xfffff419)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x7f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x81, 0x2}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x7ff, 0x1, 0x38af, 0x1, 0x7, 0x7f, 0x3}, 0xc)

[ 1187.569040] loop2: detected capacity change from 0 to 40
04:39:55 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x15)
ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'syz_tun\x00'})

04:39:55 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:39:55 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='veth1\x00')
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)

04:39:55 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0xe0000000})
io_setup(0x9, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000001c0)=')', 0x1}])
io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x2, r0, &(0x7f0000000040)="64c660ba8fbc97f213e4283e29d82e2d6b8fa67b8caa43e4324dcc90980a81", 0x1f, 0xfff, 0x0, 0x2}])
setsockopt$bt_BT_POWER(r1, 0x112, 0xc, 0x0, 0x0)

[ 1188.064612] syz-executor.2: attempt to access beyond end of device
[ 1188.064612] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1188.067353] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1188.083337] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1188.084566] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1188.085459] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1188.086302] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00
[ 1188.087982] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2
[ 1188.090577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1188.091577] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1188.092765] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1188.094004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1188.094790] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1188.095995] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1188.097233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1188.097985] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1188.099425] Buffer I/O error on dev sr0, logical block 2, async page read
[ 1188.100563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1188.101332] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1188.102516] Buffer I/O error on dev sr0, logical block 3, async page read
[ 1188.103633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1188.104374] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1188.105378] Buffer I/O error on dev sr0, logical block 4, async page read
[ 1188.106467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1188.107268] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1188.108370] Buffer I/O error on dev sr0, logical block 5, async page read
[ 1188.109552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1188.110238] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1188.111393] Buffer I/O error on dev sr0, logical block 6, async page read
[ 1188.113307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1188.114066] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1188.115029] Buffer I/O error on dev sr0, logical block 7, async page read
[ 1188.186903] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1188.188108] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1188.188927] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1188.190474] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00
[ 1188.191801] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2
04:40:08 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
pwritev(r1, &(0x7f00000011c0)=[{&(0x7f0000000000)="81269ae2bbf2e2b1a157b55eb7775e84825aadb6251769a0b71c8fb6be76cc1027b10928f96f37faefec326cf0f8b8a3004ec65dec33b998f848c55ee9c51f796664487aa6e8a3c6ee9025bb", 0x4c}, {&(0x7f0000000100)="f636c3164d8dc6cd8df9fe07cf3233733c813f3f5d8278fea989e68866e64e789c99705b8241a85d56a36b9639e064c09df28a415e6bdd0fd01bec0cc02a1bea3fc4e7b5b26787ff773023660a90bd930c7077247c6fe75636c8f47837c25eae7880345609092505f1bd8cb4a49fd11872b37c1a8cae1a0bee019fab56d539fef7b86a23530eee50d4080e8c0d83ba592877b2e1f6ae73545860ab09b9e89f3a956b8c298443c547ad8a2421c558fda6f4425299f55393abcb16876475bc65fac95973d3f414b3f602272f9b18f4c26fc008ea127040d329f86683c0d26e29e7917a183aa57f97e2136960aad51ab384c71d063843f9ae44804a06686c862af08515bbaebaafffc89479b920fac289079932af1967d8f67c54dd87e8266f540984031824cefdde238e14923f066a8ec8e93505d94761e5fef66332541736ac44a15aeff634dd22f0844bfc1084915195332f652463c9037d59147f59ce0ffdacae3bf759db3c9e74f282bfcadca1b024a67a56589551851140514ec32771a32346e551808ab12e66290b4120fb9637e0f86424f70291797bc6e3f1c8b21bdc90f355a90ade5f03454315153877026122d35961b27043f9fcaae46459a07452ec0e34310efb04002e62d6619c303e053f8262a0010deab905b937fa6929a3c60b104e9f11b0537eb036db3a8b26abb1d21d1e33181cb9c0e5d7151c14a4c73551275842df577cd6126cb69db582b3fe7772acaf9d69ac92b169ec2f18d771200d8af3df653e7f419734716d3ea69c3b6531350d401d3e34d9137a47ff30fe2331c938fb62c67a1a7ef63e28903ddd5526aa05a26a9d1c81e9de1471b7f8876f48cbf645b3b22a969176581b4f8b01823a2eee7b55dc533b47fdd80a25b12a1a4cbe16d5d9993daedbb5abe887a48b314015d127b0ec68c0fe811618024a178076a5e01ad75e8990f1ace94afc586faee9016a792679c5b53a0e388d4cfad6b1d9a308af6bbc9649eab9379908f9718dc4a08b4fbdbc160fee300182b871693cfdf7ed85f410fb3b8d0dc8c307ece4fcef83c23096c023a7d610e2e4f373c6e6463eaa47b85ce1016d6ffc36e26da16e299379f23832eb28a129f41a1371e8aec7d1e67fa4b11da295d99887470c9ae1e016740550a612a83afeb7313fadcf83cddf4970b3c0b520484373251d1ae482ea4ecf703e5b74bf9bc8fda7941767cedb3b66b45d199de4156298346b79818e087a7b10ac8ba8a6eb6efe4041bee00b073d46134a52bb77c95c901811903ff30481c3f01c3a7f3ca53ee7ffffbd51d0d29b04c85b8d0e5845497d269c939cacb4a50b057da06207ea062c42180c561b5d25f8c45562183aa8bdcd036aeeaafa5854fa6044bc41a8893c08fac17a9c94d3a9f20cda6fea7c38fa72217d4ea84a35611ce4878589770171ff907623c974f0442ccd0ef5c469ebec251a5cf6d5e9b99f9f5cb8fb55deac51d355d756bf8e7d5dc588ee3d331a8a788b904a517627302972e78d8e6b225cccd302b0ebd3a5f12fb586b5a324c2df15384258eb5ea1a0eb13618c6c809af85d6088c9e54f35aa4391aec7ba31872c5165b2294715df4088eb031d09ac4e4e0192b10cdd9a8f19fc59e14e2bcd40db5cdb3ce6defa453c3d4b87318886948a44a38f490fb371bd3d7c26b69755fd33e466783cdc13777ad83e6e65780ff73759bb351e2303e478abeabeb7a737f37d42217bce198f904a4ca04da0a99d5f3781c7f3b49509f6b86e29d3fa826b1c5d35248f9f4cabddaaa5d1a2f84230e9fe4f12746c94cf1ef0157bf34311167b23ebbbfce9e5d2b2755abe5247d4abfe77237a721532a8af8cc24f0b184e454098e3ebdc4e48e4832e08ad8244044c224b8cfa4302b48e741f1daf66f789caf8302590dbee95e7c328b4604b46d94bfbd3c1fa2cb61ed1a5df4a33cbbd6e6dee09f59442f56a5378c92435cae1b3e2d3b0206c792311f6dcb026088fb53bac4127e788dabea6be7ba58e01a98860d4073e938e1ae9b562c82585adfe47e6a9ced8fe69c1a92d929ec08cadbb812a56f1c5308bfb8fa4aaefb3e18d9b88035d245ad08e26aea0b10c5ef4bb9749604e23627c83633aae2496ce905fea9f5b2166bcc799d884f4880d777c5e450e79bf105b4434244df01c7e78af6d2d30069b75337c75af08084183c4fb1af994a51901814f2ed3083f012fd86e1e14b55f0e54bb4427e460bf2d0003862394c759f6cf7ca0deac57eaddb72d201487f22f81851cbdae7892aafec3d53b0236ec8101cc6a2fb506feb809d70855826e410b4237e8f9dc56238b078a457fa7ebc7134d1a40dd4a6b99b4f8d0d68eac240714cd6d4b3cb1b6cb9a392606230e961e215d090efbe939c5914bb0aa5a14b74dad23b41d77d6e605485702b338e73a6bc881a22c388632a6f8633de1513b7575b3b282422be2b443a584eb789ee5aba53452ab26ec819a03482fca08b8d509c317a02a7f3db8694234f460d41918907326f0acaa6057e3e83765454af4a215dd6477f2f4c2bd710160689757b61dd3a53ffed3ceeeb194d20bedba2fafb9d2a1cb999643a2cafded98cf4b7b78bcbfbe52bf46d58338db7a69b6e66f2c5a1d1733765304a12f7df902c8875dfec20dc9221980d52f321a0d61c9eed9512f454803fc24b8262b9fecd06a7f32c7a7c943ed09b95a626bf189cb3a944d958abf3a0c53e5fd2bba99b47d3827d88311f129543718f9457fb46b590e5844b5890620e9198d2f9fd6d8cead5574650aa65b9099a8f77618a38c05d6ed374de603a5a9d9b68b97c17a7b9df9712c61161c1d28588662a3aea406c639823512802e9ae652767992aec73f40c2c3d4580a625e6a981edfbd0e58a21fa4fd19e682185f771cf5c8aa142100107bd625d2f8af244034553c2380bd4c16ab501b78e451a6d7036358a35c14603584184baeea460332efeefb13c70604ab112e9ddcdb635c1bdfb97b0d6e5cbccf02772e62ce726997d744d29839c57d6e15814036cb2bf31365974cfc4ade3a234ee58ee9f44bc3ea61047d74e6fa34deed0043ee51dc5c295241c5fe8147cbb1b6cc3d1b7029521930dbd085dbd7118492356548ed0a0321aada53d5a7be125e691de49446ec768821b584bde4a6d590d8855dc9e879e866d2d091f0526fc6180d6132b6f5d2cab8f6f3f669e12c143096c947ba0e3a2332f5c5d19f556570a1005f885821174cbc445c85757ce88cd18c736e2f6dc1af0b8d4c3c5693f55eeb77a6b051cdbc8427f9be21003147c7f973b8b7770e6e25d7f2b79868063500f19a97c8ba5e8ff7db29af894525f718a8644f200484f40a1ad31a6e39cb3148399f7103b7f46cd7830b8b64db655144f43548c22205e34fce0fca399455aac7ded6add8f7549ed1321238663aaedfb0461009153da3c6ec8f83f848203fe3e7ccad387cbbab109aafe9981648365dc135679c3c6a768e41859084e071b559d0144c1992640bfad4253a2baf8308c2cb742857f636c48b357985466eaae98392a5fb58b72570b1bdd5708c2bf45c43f89252a2aec741b50cd60cdcf021237ae19168bda2cacb006478690ebf171e09d0c9b059a33ee2273735d5d28b244b54b7392600d879d6c95249b484c255fa20fa35d9aef4975473665dde8455e37bace4c06aa01ace932b967d5e555a460d0dfb3973cfa949e8f9764952a341380c6437da6c39a82a66e25ea239b2d77c926e50ec36b95885d053e4f378d43679fc6562bfca5a1abad2292384234cedb951a2c1722ef126bd49fb75d4956adcc24f0e14355e5cb7ff84a7f8dc7d7f0b0f27438ff8fb4b14571f072b796964a685a5f22dc4ac95ff0adcdf2619ca621d193732c7e6958c505e8ffe0e39bc8728fa6143e61a59b741ea818776977d02ba54a41d627fa63e470801cddb0f17358aad3b28f4af5f90bd1ff193cf3db2dc61ccf935fe73c7ce0690d5ce210e52bde467d630683ae695ede92b58af58eb5a9070ca21e48fbf84c9c1f2be2f251a457515c4c13808970b65ea6a1f2b5c51d4ed370f90dd7b8ab25a2809b65d8c432ff4afac7daefc99fc27ca6034b5bba5d718bd219936c44ddb6915ec16edecee76096a72f05ac893e70a2642547bddb29ad567c0c45fd67881d22828f701163bbbb4f3ee52945b0af7ab844d40d79f831fb001ba67b679847f603bf38ec2ccf6ebb8d740707d2f6afe0208c4f68a3705ce400bd7e9e6620c6eb804ee2cad35e304f672c4fe109d946e84a5fd6130207223c2d6d91289f6236ff4e5b16e16fa8fc523f9388cea0fb822faf2199b7dc4a82e7ec10bfd5d5c4c9cfb33ad33195fc1934e1726ca494a8c5a32118ba9f45c3a0140ec29a1a49091ddcbb17560d1359e590579f45dc7e0e876aa3a73b0949fb14539d158bd548baa46d3a79f76f6383841f611b1f02245392c7d26286d2fc69a034713b97d465f553d3b09f2986a8b8d31fb6412d8d25dc426543fde3f5fa171b1cb038a6c263377887e5f99a8b25961087d5114a584ca76924f6554bf755f6b9502c200ea8b082ab440947dc38a2942c558bc66f14223b22caac61d5230fc7ece684b46915db4e8c283d35ca8ea030c3c473d7139a9b1bd27298a2e12b0d182d0bd481585713f8fba2ccda07335c58b4fe611e4ed48e853da6e798caa4a94799bd44b3dc784e55bcc7a1af94415e7294fb323b338c109f14ba7d713d44ce4c2dfad864aeeb0dfd7ddb8c20f9ae2b1e362fba22f0fbcfe47d3c84d39ebf84e3759adaa9656dd6d1e2f7fab084ec0acd53cf374fa4d6cb31c6765c53a6eb4a9159a0ef046b063e9143fbd52f54a7c81837e6a1d4321b72df543276662a2f055e51da1c685f76792e18ee747fe0e6479e6e6c68fc4c374bd3fdd73e97fc504032e4e3f8de1f1200e7cd1ba581cb14cb98f5f45af3fafe72405527ea1c9327e30005a8379559db590fe1c4297dc0b3e1f728738da3ca059f19bf3e8c627d7859d9de1a30801d11022328f5052822f28eb8d36c4ac9aaae17c363b3f790d7812b9e53b51a0799b66cc68b41662074f764180327315bbbaf7eee35dd53e11847c1bb66a5b8a0d9a9acd78aa4f9504c10a30e8b85272855b8c454e5c83b5233fbb55d4a539d5b5b906e06e3cb879bb50e588145b52e6368166958f19219847861368da53fdfe7157aab84f179b13f954ce763c63b234ba90fbf043465048fbeaa6b683c46b94bfe8b1490bc0f49cc733d78fafea9795234cd750088bc95bf793ae16bf20b81f4c184e1e031384125f75fd3d45245ff17d0337593bfaf8e3c64b78e7bcd672fe2d860f3c62405c713933be0c61fbbe965128fa7ab7535c21d63cacafd03d8bc34762d3d17a1a52826eda31e7a51b33b8ad869b86b482f4a411f78e938190f8c49726b20c3076cfbd3d98a1547f3df8b791bcbf19f9127b34b5384bf50fe97db9a6196edfb1673031e7fc878958fea8cdc4b74b58f5a2347da7b4928c00a50167f8f79a1bff7a292428590546a4bab71dc3fda15abbdcb5442306e45f23e9a790adba66c16209331bdd5d6d3cb88d76b13633619c04f6eeaee746389055e9eafd236b70d3cefc085fe2de9b8a197f669aa37ce7f91cd30e2e87bf820fe95d952eeb01b9f67f8737d1a9b73f8352b295b26cb9cc6a8669d8be81141e12d75314a6a2e1ed4b99f84ced2d42ccfc6526f4b61fe4b4047f89a6be132a89a32a02c2438db9badb089f9a5a303bb6939696cd4f86bc2012aeed03d14773dd5f36e5a814aacd9418586fdb11", 0x1000}, {&(0x7f0000001100)="1df3c74038747e4ab75eaf1799f0bcc8a1ae03b64d54474cbd353baa583ff358bd7c48c4b95a000a0ad39a2d58096d99256bfb06a99ed4d97ee746f4b7add0a01fc2c5529b11d973d1573ff4379c3a13ea82f55a31b92aca0a0ed13fbd949a48649196fe624ba5a94a1f384844a05a7824a71418844cd101da46538cf36ff1762049a75b6f58afb0be2f51b22c9e9d33702f52541b53aa5c5535d44dca7e6d47966b3b43cbaf5197480fa1207e57bc20", 0xb0}], 0x3, 0x9, 0x1)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)

04:40:08 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), 0x0)

04:40:08 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:40:08 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x20, @none, 0x401, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x9, 0x40c0)
bind$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x100, 0x2}, 0xe)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x800, @none, 0x7, 0x2}, 0xe)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)

04:40:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(0x0, &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0, &(0x7f0000000340)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:40:08 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:40:08 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:40:08 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(0x0, &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0, &(0x7f0000000340)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:40:08 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

[ 1200.403576] loop2: detected capacity change from 0 to 40
04:40:08 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), 0x4)
close(r0)

[ 1200.960807] syz-executor.2: attempt to access beyond end of device
[ 1200.960807] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1200.966018] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1215.813305] loop2: detected capacity change from 0 to 40
04:40:23 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(0x0, &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0, &(0x7f0000000340)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:40:23 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:40:23 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000))
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000100))

04:40:23 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)

04:40:23 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:40:23 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:40:23 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
ioctl$FIOCLEX(r0, 0x5451)

04:40:23 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(0x0, &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0, &(0x7f0000000340)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1215.913040] syz-executor.2: attempt to access beyond end of device
[ 1215.913040] loop2: rw=2049, sector=44, nr_sectors = 80 limit=40
[ 1215.928234] syz-executor.2: attempt to access beyond end of device
[ 1215.928234] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1215.929754] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:40:37 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(0x0, &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0, &(0x7f0000000340)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:40:37 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)

04:40:37 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:40:37 executing program 6:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:40:37 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:40:37 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0x7f, 0x6, 0x4, 0x0, 0x4, 0x42090, 0x14, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x0, 0x80}, 0x4900, 0x9, 0x7, 0x4, 0x0, 0x9, 0x6, 0x0, 0x10001}, r0, 0x10, r1, 0x8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0xc, 0x0, 0x0)

04:40:37 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_setup(0x46ac, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffff, &(0x7f00000000c0)=[r0, r4], 0x2, 0x0, 0x1}, 0x3e3)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r6 = syz_open_pts(0xffffffffffffffff, 0x100282)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r7, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
ioctl$TIOCGICOUNT(r7, 0x545d, 0x0)
write(r6, &(0x7f0000000080)="3cc125a72e504d3310ad3b7ac975a632359e62", 0x13)
setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000100), 0x1)
bind$bt_l2cap(r7, &(0x7f0000000280)={0x1f, 0x7f, @any, 0xfff9}, 0xe)
fcntl$getownex(r5, 0x10, &(0x7f0000000000))

04:40:37 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1229.971378] loop2: detected capacity change from 0 to 40
04:40:37 executing program 6:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:40:37 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:40:37 executing program 4:
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)

[ 1230.121480] syz-executor.2: attempt to access beyond end of device
[ 1230.121480] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1230.122997] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:40:37 executing program 4:
kexec_load(0x21, 0x3, &(0x7f0000000100)=[{0x0, 0x0, 0xffffffffffff1e64, 0xa6}, {&(0x7f0000000000)="ae", 0x1, 0x3, 0x7}, {&(0x7f0000000040)="226d7ae9378ce9c23d5a44a09317358a88c3aa622ea31bc876413f6156cf04656347350e0c54410e3043d78b89", 0x2d, 0x7, 0x8}], 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14080, 0x100000001, 0x2, 0x0, 0x80000000}, 0x0, 0x80001, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0xc, 0x0, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0x0, r4, 0x0)
r5 = getgid()
fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x4}, [{0x2, 0x0, 0xee00}, {0x2, 0x2, r2}, {0x2, 0x2, r3}, {0x2, 0x2, r4}], {0x4, 0x4}, [{0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x0, r5}, {0x8, 0x4}], {}, {0x20, 0x2}}, 0x64, 0x2)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {<r6=>r1}}, './file0\x00'})
sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe0, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0xbc, 0x22, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe68}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1c}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7e21}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9000}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb34c}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xabe1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fffffff}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0xe0}}, 0x4)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080))

04:40:37 executing program 6:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:40:37 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:40:37 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x34, 0xffffffffffffff77)

04:40:37 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

[ 1230.273122] loop2: detected capacity change from 0 to 40
[ 1230.401090] syz-executor.2: attempt to access beyond end of device
[ 1230.401090] loop2: rw=2049, sector=44, nr_sectors = 80 limit=40
[ 1230.403255] syz-executor.2: attempt to access beyond end of device
[ 1230.403255] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1230.404249] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:40:50 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:40:50 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

04:40:50 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(0x0, &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0, &(0x7f0000000340)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:40:50 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:40:50 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:40:50 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)

04:40:50 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='geneve0\x00')

[ 1242.528817] loop2: detected capacity change from 0 to 40
04:40:50 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000180)={&(0x7f0000000140)=""/64, 0x40, 0x1, 0x7})
getsockname(r1, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80)

04:40:50 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x6, '>gc'}, 0x6)

04:40:50 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

04:40:50 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)

04:40:50 executing program 7:
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x0, @loopback}})
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080))

04:40:50 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0), 0xe)

04:40:50 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0xd, &(0x7f0000000040)=0x2)

[ 1242.822510] syz-executor.2: attempt to access beyond end of device
[ 1242.822510] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1242.825569] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:40:50 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x4, 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'})
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)

04:40:50 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0), 0xe)

04:41:05 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
r4 = signalfd(r2, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, r3, 0xb, r4, 0x9)
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000000)=r3)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0)

04:41:05 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0), 0xe)

04:41:05 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:05 executing program 4:
keyctl$get_keyring_id(0x0, 0x0, 0x8)
r0 = socket$netlink(0x10, 0x3, 0xa)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
recvmmsg(r1, &(0x7f0000002b40)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)=""/99, 0x63}], 0x1, &(0x7f0000000200)=""/129, 0x81}, 0x4}, {{&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/210, 0xd2}, {&(0x7f0000001440)=""/14, 0xe}, {&(0x7f0000001480)=""/177, 0xb1}], 0x4}, 0x2}, {{&(0x7f0000001580)=@pppol2tpv3={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001600)=""/86, 0x56}, {&(0x7f0000001680)}, {&(0x7f00000016c0)=""/234, 0xea}, {&(0x7f00000017c0)=""/34, 0x22}, {&(0x7f0000001800)=""/104, 0x68}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/14, 0xe}, {&(0x7f00000028c0)=""/112, 0x70}, {&(0x7f0000002940)=""/138, 0x8a}, {&(0x7f0000002a00)=""/42, 0x2a}], 0xa, &(0x7f0000002b00)=""/56, 0x38}}], 0x3, 0x40000001, &(0x7f0000002c00)={0x0, 0x989680})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000002d00)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c40)={0x70, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
setsockopt$bt_BT_POWER(r3, 0x112, 0xc, 0x0, 0x0)

04:41:05 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

04:41:05 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:05 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:05 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:41:05 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x4, 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'})
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)

[ 1257.608412] loop2: detected capacity change from 0 to 40
04:41:05 executing program 4:
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x438, 0x3f3, 0x100, 0x70bd2a, 0x25dfdbff, {0x10, 0x0, 0x11, [0x4, 0x10001, 0x77f0, 0x2d, 0x79, 0x0, 0xed, 0x3ff, 0x6, 0xcc51, 0xffffffc1, 0x1, 0x1, 0x4800000, 0xab, 0x7, 0x1ff, 0x3, 0x9, 0x10000, 0x6, 0x2, 0x4, 0x4, 0x8000, 0x4, 0x3, 0x2, 0xffff, 0xfffff801, 0x4, 0x9f0, 0x2, 0xfffff801, 0x10000, 0x1000, 0x6, 0x7fff, 0x6, 0x315, 0x8, 0x4, 0x8, 0xf8, 0x88c, 0x7, 0x6, 0x401, 0x7, 0x6, 0x2a30, 0x101, 0x0, 0x100, 0x7fff, 0x1, 0x7, 0x692d, 0x40, 0x0, 0x4, 0x8, 0xfcba, 0x6], [0x3, 0x1, 0xff, 0xff, 0x0, 0x0, 0x8, 0x0, 0x9, 0x5, 0x6, 0x2, 0xffffff26, 0x10100000, 0x7ff, 0x81, 0x5, 0xffffff00, 0x4, 0x8d, 0x2, 0x324, 0x4, 0x5, 0xffffff7f, 0x2, 0x3, 0x0, 0x9, 0xbece, 0x1, 0xfec, 0x1, 0x7ae, 0x400, 0x4, 0x1, 0x80, 0x80000001, 0x5, 0x1cad, 0x6, 0x4, 0x4, 0x7, 0x3, 0x7, 0x7fff, 0x4, 0x0, 0x0, 0x200, 0x9, 0x6, 0x401, 0x3, 0x7, 0x3, 0xfdf, 0x5, 0x1000, 0x7fffffff, 0x81, 0x8], [0x7f, 0x200, 0xa6, 0xd99a, 0x3, 0x1, 0x800, 0x80, 0x6, 0x28f, 0x3, 0x8, 0x0, 0x80000001, 0x10001, 0x80000000, 0x800, 0x4, 0x9, 0x0, 0x1, 0x4, 0x7, 0x0, 0xde5, 0xffffffff, 0x2, 0x7, 0xffff, 0xa89, 0x22, 0x8, 0x9, 0x1ea7, 0xffffffff, 0x80, 0x200, 0x40, 0x9cf, 0x5, 0x2, 0x36a6, 0x0, 0xc4d, 0x7, 0x101, 0x0, 0x9, 0x1, 0x4, 0x9, 0x10001, 0x2, 0x7fff, 0x1ff, 0xff, 0x1, 0x1, 0x9, 0x5f, 0x81, 0x8, 0x81d, 0x400], [0x0, 0x3, 0x822, 0x3, 0xb88, 0x401, 0x1f, 0x4, 0x8, 0x1, 0x40, 0xfcc8, 0x5cc, 0x3, 0x8, 0x3, 0x80000000, 0x9000, 0x10001, 0x8, 0x7, 0x9, 0xdc95, 0x7, 0x8d49, 0xfffffffa, 0x3, 0x7, 0x5, 0x5, 0x4, 0x1ff, 0x0, 0x4, 0x8, 0x0, 0x332, 0x5, 0x35bb9f43, 0x8f, 0x1, 0x7, 0x3, 0xffff, 0x8a, 0x6, 0x6, 0x3f, 0x3f, 0x3, 0x401, 0x80, 0x0, 0xffffffba, 0x9, 0x4a, 0x7, 0x6, 0x149, 0x3, 0x81b, 0x80, 0x2e55, 0x8], 0x15, [':\'\x00', '\'\'/-*\x00', ',v\x00', '.(\'\\&$}\x00', '\x00']}, ["", "", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x8004040}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)

04:41:05 executing program 7:
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2\x00', 0x1ff)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)

04:41:05 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
r4 = signalfd(r2, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, r3, 0xb, r4, 0x9)
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000000)=r3)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0)

04:41:05 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:05 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)

[ 1257.802024] syz-executor.2: attempt to access beyond end of device
[ 1257.802024] loop2: rw=2049, sector=44, nr_sectors = 80 limit=40
04:41:05 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ftruncate(r1, 0x7ff)

04:41:05 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1257.838519] syz-executor.2: attempt to access beyond end of device
[ 1257.838519] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1257.839629] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:41:05 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
pwrite64(r0, &(0x7f0000000000)="c1e6283ae0134a606f959c4e4e5fa52770e8d0d3d6dc3633767ca308af29a0c8c3410c73bc9d55f29f9df1a359f4b6c20eb692a23024f2d3ed75", 0x3a, 0x6)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0xc, 0x0, 0x0)

04:41:05 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:05 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1258.016438] loop2: detected capacity change from 0 to 40
[ 1258.425591] syz-executor.2: attempt to access beyond end of device
[ 1258.425591] loop2: rw=2049, sector=44, nr_sectors = 80 limit=40
[ 1258.446206] syz-executor.2: attempt to access beyond end of device
[ 1258.446206] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1258.447446] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:41:18 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:18 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000280)=""/227, 0xe3}, {&(0x7f0000000380)=""/219, 0xdb}], 0x2, &(0x7f00000004c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x40000001)
fsmount(r1, 0x1, 0x88)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r0, {0x1, 0x466}}, './file0\x00'})
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000100)="a33e425531083c3e0b62d53e863a94a627bc9eb5af6dcf25feac030223512abb47866137434b2bc0581834b94bba464a9ce370bdbba46f49500468cd15798d5852dd1e702fdf6a4a7ed50eeedc36931fbabc40f3110417b966fff91192046fc85e56572070051f943ef1ced0a92331ae9bd481c988906facd78c4458209c4bb243a4ff6b71a9e68c8466124419f23aee3206587ea536341ad417dce8b1734043620c9246a392eb1c049cc2f804109c69f4cc4ec97d6d14fb1542e9f0b5f73e2b77fae68e1f15e886046871e9c42542f94012b7433af6ef4e5239bb8278ed1198bc106bb5c4a01fcf809d8615dcdbe528162c889880696210e1234a2b0e91f875")
openat$hpet(0xffffffffffffff9c, &(0x7f00000005c0), 0x107900, 0x0)

04:41:18 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:41:18 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:18 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:18 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)

04:41:18 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:41:18 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1270.677659] loop2: detected capacity change from 0 to 40
04:41:18 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000001c0)={0xc4, 0xf3, 0x2, 0xff, 0x65, 0x6, 0x9}, 0xc)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, <r2=>0x0})
r3 = signalfd(r1, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, r2, 0xb, r3, 0x9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x1, 0x8, 0xff, 0x0, 0xfb0, 0x40400, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x5a8c, 0xff}, 0x2538, 0x3, 0x2, 0x6, 0x3f, 0x4e41, 0x401, 0x0, 0xfffffe7c, 0x0, 0x80000000}, r2, 0xc, 0xffffffffffffffff, 0xe)
r4 = getpgid(r2)
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x9, 0x1, 0xff, 0x8, 0x0, 0x8000000000000000, 0xc80a0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x81, 0x1, @perf_bp={&(0x7f0000000100), 0xc}, 0x8800, 0x30000, 0x200, 0x5, 0x100000001, 0x85, 0x989, 0x0, 0x38, 0x0, 0x6}, r4, 0x8, 0xffffffffffffffff, 0x7)

04:41:18 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0, @out_args}, './file0\x00'})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = accept(r2, &(0x7f0000000140)=@ethernet, &(0x7f0000000000)=0x80)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000080)=0x3, 0x0)
r5 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000040), 0x2)

04:41:18 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:41:18 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x2}, 0xe)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000100))
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)

04:41:18 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)

[ 1270.859596] syz-executor.2: attempt to access beyond end of device
[ 1270.859596] loop2: rw=2049, sector=44, nr_sectors = 80 limit=40
[ 1270.872730] syz-executor.2: attempt to access beyond end of device
[ 1270.872730] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1270.874009] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:41:18 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:18 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="000006001dd86c2197a39f6790cb4582ae4045000000006c65300000000000"])
getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4)

04:41:18 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:41:31 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0xc, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x9, 0x7, 0x20, 0x25})

04:41:31 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:31 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:31 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:31 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:31 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040))
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000))

04:41:31 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:41:31 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

[ 1284.109962] loop2: detected capacity change from 0 to 40
04:41:31 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)

04:41:31 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0xfffffd6f, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0xc, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x1, 0xff, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)
flistxattr(r4, &(0x7f0000000200)=""/29, 0x1d)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440), 0x10)
r5 = signalfd(r2, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, r3, 0xb, r5, 0x9)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r6, 0x40086602, &(0x7f0000000100))
openat(r6, &(0x7f0000000580)='./file0\x00', 0x400000, 0x40)
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xff, 0x9, 0x9, 0x9, 0x0, 0x80, 0x82000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x60, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0x0, 0x7e9b, 0xdc, 0x7, 0x2, 0xab, 0x4, 0x0, 0x1f, 0x0, 0x8}, r3, 0x4, r0, 0x0)
pipe(&(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000380)={{0xff, 0x81}, 'port0\x00', 0x22, 0x200010, 0xffffffff, 0x800, 0xcf1, 0x8, 0x6d9fb15a, 0x0, 0x6, 0x6})
fgetxattr(r2, &(0x7f0000000480)=@known='system.advise\x00', &(0x7f00000004c0)=""/141, 0x8d)
getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8)

04:41:31 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:41:31 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
fcntl$getownex(r1, 0x10, &(0x7f0000000000))

04:41:31 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:41:31 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1284.280942] syz-executor.2: attempt to access beyond end of device
[ 1284.280942] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1284.282190] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:41:31 executing program 4:
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x7f, 0x0, 0x5a, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0xf0733968eb05c544, 0xfffffffffdfffffd, 0x81, 0x0, 0xffffffffffffff80, 0x1, 0xfff, 0x0, 0x9, 0x0, 0xfffffffffffffffe}, 0x0, 0x3, 0xffffffffffffffff, 0x2)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4)
bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x2, 0x2}, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x1}}, './file0\x00'})
bind$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xff}, 0xe)
sendmmsg(r2, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="6b4f5176557b7c918f7e5e2f41d89fa2b8384dbb94cb045ebd1b022094fb823a755e895639e64ab1c82aacec7ebff524b421543dcd01ecedc9540e245ed24f557636", 0x42}], 0x1, &(0x7f0000000300)=[{0x38, 0x115, 0x7, "5606e0f7fc3b2b1cd0be0df85b4ed0d0ce7d1c1ce3690013172cff12e0774a08bffe75df1b6a98"}, {0xe0, 0x10e, 0x400, "64db52f600d4465af795ababc3400a36bfceef2a8c01f3b893f1f0723d2eef5b65c7ef054ad8c8e3c524e109d45270683c3cb9474238441d2e643e94d3d3d1a7dcc43b89211255e7ce25dcb937642224396d77eb1d2cb5d868526db3fb687d332810c9d9358c1dbd8d0477daea695bf4dfd98f221c2d619a32d53651b7d6f3ad1bea1f323a721a7f1116949ebd7fd755debc0c8ca0f3d07b756757af570ce139d7e57c2a1ed991b1f11d6ce972f26e281be779a3be03bd095d708fa941506c22f1ae532d17d21d43ba85b37acc"}, {0x98, 0x119, 0xfff, "31ec744ece0e9489f3988454a04c9899c502387271b793a178e9c51bad178b8642e0053924010c9b4ee3e3cc18307a3e6b3990d3e705a691fc62fcb62fd72d43c536edeeb825b5654eb664fc2f1813044a613ea92ccfc4f1662008f82475a81f6dabaa66955fae7db7f51092faf65b8f6435a884de45bbbe2dc8e4a8183aa02bce6c"}], 0x1b0}}, {{&(0x7f00000004c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)="b14abca4fe3c9b41fc07370545e42eb88afa92ddff301055d20bc31e71b3341a9595d71b94a5859fc33ae1b96e031d1cfa96fd8866a99dc70cc49a8ce747822c8539eaa1164ae1050e2323354d5da2b7c787830128c0f893ccc2aad476cd6f799e2df683fc8190c16cb575402513ade3", 0x70}, {&(0x7f00000005c0)="454d60bd38208d48f24e4372d2efc194c30a8c1607075b501ebf9ce211bc4eb92dc08572e8d041e9db5e3476e3d7c3770501d62aee45554a684fd0d1956c3f9f9c3d88e54a1ee4", 0x47}], 0x2, &(0x7f0000000680)=[{0x1010, 0x10b, 0x10000, "1cb1a079d335bb3d116f531b310d2749eca75a6733202424878996b7b36a650b3ecae8500403580ec1bb4b323c305cacaa961123c9b9ee723136d67a2f3d26230fc400e557199c28443cac173c6a8b9d61cf270a8fbdf79b4f1f73e6d38380bd0f487c66b3eb7937c3fa16af677956469ffe1d438f167303c8bbd9419d0dbfeb4632117704733704ed8b575511b25e383734ec0e82e9c074558bfadc132a5488ac9b39f792fad014d1032cd5b358846e889f94726085c763e4bcdbe30bdf948dff49547eee37434e6528eb726298f841de40cc48dd7674c3ad6c26173277e111ec28627f1d3834ed343406ae4327971036039d9667a2efd927c552170a59211bbbb6b193015b14616f5a1355432c528822104924cd748153d6d6728b8da3c4baeb64912083e137b0abca6a9cf1d76b72a78dadcb1d1c34d24d2df4db062435033da7f90ddaf8901cb6f76dc368e862db885d7b64e28632b02d8e9debc1683a4f8ec8ef3003b432a0babccb1e4d69e22f3bc73d8cf8ade2d5c72830bf3446be1205cdc702eba850132e9728d65e8a5db5fc01fd2921742582c0928a94f052ae66703c79d13d3b73ba06328a2bed68fd5f4bca0ced2cad9065ecec97d25b531bbe50420e978f7d805d606d228481d2eb59278b309c011bbc7c39063e365367a61c64138d2aeb953efb46af94e610c644a3bbc09f2fee97d661e3b830883f05944c857729b1434a7594206d12b3d44279af63ae04f505d44ad5f632649f6c4b34add940cfe607df30cf0c0497f7fe767306a4c7c3c69667b8fa28b0cc41c6df1dc0bc10dd7d9cb3897472e96a7cc0504219edf065e3bed7e6b94398eccb075d807f8d28d74e999dc3441f80a9cef8e8b226f7e930235028d9ba2951747e88b37521f92317419050bca490125b6cef90f268a816f191bcda1b824a0511571484ad6c7afce75443be9d69be6da9c6fe7cf010359847098e35d6c3da7a195eae6d260ca8c831c0d9a5e55460029cff4cb29abbbd6e859ead038149193aaebf9241bd328b390334103820aa08905b50e8b2a0dd5051221013ab0a9387418ca711644ef03ff5b7322abeaca864108ee4e0c4731deb1ae98a360bad5a51fc511e9369d078f8b82cf32c4922b0fee2a5c637658c12eea589ad5d7ba2de3b321cca6edf875f2e0746e1feca54ed2e2f5f10685df053c459a644208b8cb039c50174d6e26bfed09f84673ed239561357ee30f85ae6a390d64ca4c21bf19a1a910c3772bda39e8a8909b30487d8848594ee6556f4251caea6ef345ec42309d185ee619025943010a224cb894df6d179b7c87a3f766035c9f561c9da756ecaf85c586a2f38cc7ed925c84abdc1d59180a59966c8919c61d3e554296ebb7aad7d90c2d0450ac49f8885707047fe17afe041100c4aeff7ba33886324a935bae13c93244ca39718111aca22604b876611c5116c79100fc49abb4be2e4dfbb249894fbe2e937fc83c45ffab17907b6690ec77380d3f07fc2f80329542e0fe9c55bb73d18f92ede81f1267cd074429b76e88ed0192c90b3834220ce373578d52b38a65fb89f15fda976caee0aea8f9620ad1e4c78d5b74f91cfacd5948a3b89a72f8978f65a7b2c08bfe45fbd5384f3ebfe9eb2890aaee5c347654e4fa01bbd82013551d5b44573b4e12c8c248be7e73895f33c02aeb1d33f81207585e2a370063a6a6683d0d7c0f6ee5ea043fb679eb98e4ba22b5153e25ec3680a491972967cfee3f42421193db29685eb27e4792a600bc0d8fdb16138736db67a162c4a628061b4f1992491f75b71b61adca6e2469f794ee65923c993a74ea961d3b195224b418bdf701be7361b6c62ec0cbb89c410859b31fb2e9bd1b74032e4985f7d88ff824875331214aeb14d31065e65662f94cdec138d00abcebcd142498de4204d2efd2a1b782b91dfa3c337d80061f4247d8f4834439863891a9590b47841f53df071a96f6b0b3e87c78987d9c9c1d35d3aa6112f3e2ebf083ff7646d0d1acf26d12631bb7cf8ea3545f24eab2f4e6a6faab13095623d1236c7793bd3d045177497725af4b1d8901dd11020a5dcc4b5dcc7199158977b2abd6486c5ab4506165938d42057da9d0ef680e94d72be4ea04b1b0193d15a7b153f5a613d742085a99c333190ae3a8dd7f568830fda46a0794134fa197d6cd99bf22d256718e4b61c511097d5a751895c9512817371ab91726ab3cbe6244639ac8498ef52b7157a7704718d165d014039607140c6a355df5d9438e0c459827d020b68e4d5952b079a2111d161115f3097c4dfd69c65a9d86b865ef40f9794883a567a5e0e1abcdf1d19bd128b2b1e7a95e64d798f422e80f85e4bb7e52a425b8a007fcbb3dc07d8ab99b8f1e32a286d0c41f9657334e250b5460f60f74ae80dab6e7865c085e1a82396a85010e834773abcad926745bd5fdb3722b6bfd3c9682722ec7de5b52f174d5d0b519287b313a7327c48e682ffc9f90157d786a9628883d23ee5389c12d90b234c51526886a0eeca2087ed6100076ce232276d925dec61167689f995bce911807b9e609c4e439a92e08bc6ab134c55d5df5c3a01f8a56cba597b8bbd8a1e28ef6997c00b4660765e1a1dda799b8fa5d7103166130f6279adcd27baddd0a042ddf5edd15e7d13755e7d1fffb13b0d4d3a9a5fb8bb3429c43f1289376f163ffab7c7e9d380b27cbe55c2dc4a1bd646a42d9e5943865aba4c4c27805e28a1ac09f7e1932d193d570a3c4eb1d212416e083f67a404702ad43cc8133cae0019029de444397b6f7579ed4e31b03dc1e7d5cca126f0855381970055523d47e087b29ccba9cc252bdf08efefab7457ae77027488031d80d0b6731be629e1b6f39cceefca28889203a14cbdc8c58d9167eb7c48b5d47de6b4a699d6b6445b5abda7177c04558d1b1e6bed093226972ed55972c5d89a0df6f8177800fe19a5360bb12aa58daaffb4149e079ceca4a7ed490b2b6a43f0fc681a865c9fd1c05792faff452bd909a1e0a1a1e657e131dd02007e49e276d70e6b3e371906a283e437e468585e5ed17006094490bfd7c186fae30189a9ae82ae0e1ab95e00564515935f964d4b15bbb4b644c7931abe8cee23b308fe4041d7a5ecaf973f6272212346fd19dc8f1911c8b564a1c2991c9fafa158d98489fbd853d010f7afd067ac40caf9a005ee8ab3b11ca4ce167e4ecee27f76617f11e7838ff668866a096fba5f505e86229c2d79e647a83ec2b4154c9d1699445214fe2b20d37a104cba362e8613720f0f13f006e4661b2ce1558449aca1181d824f9eba1561e587920ff6b00c4d5eeda7cfd12a2c95aa0bbfab7d47ff2736d5aa2cfc6531a8169c21d9dad2dc44ff23164fb7954364efbb7527bf59adb993026c285e0077333d8d02fdce6b2a72bee98fca5e1538abb981d2ace62e4a8f4b30bd2e3dbb0b72ffafb14b18524d4385022978134642b9547a30bd1b741f8f2fee3b255b4721c7c6a74041e8e547cbf3544adc352fa9046ac30c9edf9220d5810a67162a78c983ea8d6602aca5d71fb897d43b50e4acd4838cb5059343f75ba14044338ce3f738765e1b63a5ce2c0a21226a77f27bb0a933bf91a657208d7191cc8f6203d27d57727d7a8bc751fb9e2f9be1365838a68f48f4fd9bece66b47fb47dcb039e18c38e8b32d36a7c1908d28cbba4ef96ae04040ed7782bb6a07bac460612fd2eeaafd4b1d27a6d55efef3c404c5755585f7344a625aea9f6763442f7c6ccc23347cf70b88922b6b1bb46b60aa7f707deb1c959f2b973524669900cb31af68646b0c30c33182d1c58b65564076d64bd83d6f2010064b9df0c03f964eb16c6c6910ae5d40b019027d73071a8e741a152efc28c369acff2272c5e747493d36c1b4449ae73b84caae21c3ca053eda69c6e89b7fd3c87b4c3dc432a0ba20424183befff3c78de18d0c4aa8d657f1ef8b5aee419a3cff0a79d9f093f2e0132062ac4e98686040732204c77b668a8b6e5ca873cb88e1f83516962b77f35377b425dc0fac09b787f8c464472cb165e700366664eafe3007ff317c048a4107eea8dca2d1896149c7abf6e63d1bba6641e6fc8fa8b936533b0ed13cf3737597371719c4a076587245971d9018257bd6533e8f5dd3089b9724ecdd167417bccc89e3fa1e2b934d011d313b8de630b4f7ed730080929000b63b83ddff18c4b39b2beaa3d3b009e685bc32e02570cc043eba65002302ac759e19b5d8d95b2b2d9a1cfa9d7915a63065506baace8d9d37a631d90795d6ecf053690e30b0dd6b521635fb08a781f40d7e8279c6658f117626bc49bb55c901b84741bd9fa9806a3706462d15e6a2100960e3404c61bf375fe5355dfc98dbf89cd3244c110196e851e895f28487213c4e726f5f38c23b0296abeb4cf076c1bc808c443dfe57a83f8852a52c33c34a5b23748f2262d64b31946229581fcf1d8232950858514e07ca8d4c33d04800612610a9d0b59a998dee11a433184e72fd4705a16642320a76846c761e30eec83e5f41834a512285d705a4e5974332f4890cd38dee94b4f7f8edeb78584fa2d26f3c8d4cd3622ab25e17b7789ff160f958a73e31e8161d7f8dd31033bb263124587ea48026abe143f50f978e459b6b1a65313ccf91e7a0ce35279d03d7e0426c00e31cb385ebdff53c42c1938d0c47e0e4f0141e85cd16b625cea8c5d729b62465785ff8f85bbf1d1c8784c67b604243e3cad3720de363bf26a77fa8236c1fb0dd75e0d857eefb33c561ed8fc2feb96d22a01016edbc9cfcf5dcbcb7ee2dcfae75b4830e6ed24949ff7f96794230872204e497237f08fc536a3d12a8838c056e6786e272082b5c19ca6e5418bb8f79bccbe90809dee74cc5108142895958f55d1e06ff8d9a2aa77a3628ea5476549753b33c9048827bcd260f190c938d74e5037dea559a39e57bf112b3542d5f55de4b8ca58fc95aa59f1d26d4aeef90b9b6016fb11a83c806a736a409aa64714a83042df315c86c04c1555bb1db20713fba97adb2335901cc7586fee91e8b76d861d5fc0199583762ebf8baf0dded7e30dff7eacb76d05165f386832a0d622bd84cb8d0da1678aed0351b494a22a1c118da58ea133024ddb7b1f05c5e4eb1822a01f59ccdc949e6879fd89f1877238bcba53a61301f928fb4212b0d6c027900a98298b02efcc5cc0e7bcab33785dca7571729320d447b63cb6abc8ac92347057f25e066035907be1a2cf3021b57ea0b3f169af9195c776817aa88c7a72c2dd549ceb71a9f9343ca988250b9be7b8f80aa17e1aed6b11f6be5521858a47c36ecad430386af7f5ef38b3482bb9fff87fda75540719c4e607ef53e2d0c3779e207de2bb349755280c6fa101dba107fc8946013c1646e7760198e8a995b00977364a33343a3814021edb5c36d74ea6177da18abd0118a4d6dba6115490f72697ddfde2a379f28fc5ee76ee4815a945dc8885cfda537745a3d238f142a2ae0d8673d2d333f8926e3c10c7e85e617fa612692c49601d8b9814e35c67ddb1b61ab042fd2ab8a2a754ea460a66b47fab632daa2b7cde7100f27f5218c2b985237fe003de99bfaf40580515ec68a91630a7146b32430025647dcb0f6ba4df254efab1ae8c4ac393b09304a330413a064845e1a5aa4f8446b9ead011514e282cf4f38bdc007cc1cc646f930276838bc566a4cffc2f11bab89692288894fa4fef110b8ba177764202979a52d47cbba4fae4ec0d23bfd3c49b94802ecab6e744745a564f51d2cb4c6fef4b7f9dbe7b59ab36793"}, {0x18, 0x10f, 0x0, "69a6d621c917c0"}, {0x30, 0x102, 0x6cf, "be61f93695df99e8b9acc4648ea4888b05f9cf130b612a994d3cc642e5e5"}, {0x18, 0x18c, 0x6, "84d03685d7"}, {0x30, 0x111, 0x5, "be38cbf84e2a350eca9656a0459f0a542def7107185db3ef709ec22787d5c556"}, {0xd0, 0x197, 0x10001, "f471b41acdd01f91c2389592ed0acc1336e58efe0d695a9cc0ff5530210c66fe5fc4dd3da8726863790f91df95b9542cdf14d731fe290ac25dfc9124c28579b2527ee7d182afe370e0a2b643a61948fac3fa2e115d3a86f10e44f25382f6db7c961b09b456e94c8bcd852dbe2d06c135e5a0350d629db01323df2d000d3e2f9e7fd22b4d2d61ac570f043bec62752051156822f8d5d3c402d29e51878b7397a069d76148280e3b3a72be75ac5f990acd8e3026cdc59910ad5655cc"}], 0x1170}}, {{&(0x7f0000001800)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @remote}, 0x2, 0x3, 0x2, 0x2}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001880)="d68783cfd0a1bab095a7121c64aa64da80d155badb16ec4b57cbabf0e536dd8ef7cfe151d74db808b6f386526dc688b670ad4eb6d0420991192983b8fffc666a9d2ad73f40a01692c44eb7995d84053b2a31cdb75569c9afd22504aa5c2124862387cdf7bf6577afea27c98b93669befa89796c462e288a7684c666bd124125792b70654f6d73a134e20f4964ea1e167b08d7d3e7ef5ed6c51d3a997e13b8b17ea56788b2e6070edd7d7968335e05fa93add722edb698ccc43224f79f14a9e58a035da3469db6613ab01711128e5e133bcf204fe00ebbae4edccb95009883e0a6632a8029961b0958c67617eabe6", 0xee}, {&(0x7f0000001980)="104485f27b1854e13a4d71f9f1269903888d0c2eadc3e8f82f236b1764bbb377618c7c9fe3ac1b", 0x27}, {&(0x7f00000019c0)="4fe3a69049495dd75704820db12c49882ad573b8e212c7066728d541529bb965980b1fe747ee3ca69de00651d3276fcac958095193590f31f09df390863086753e6e23daacb00ca6a6776e800a35df4a2e086531dc6e123988eb301a917cba475b4eccfb2dddb363a9fb487186b5d1a6022bd07a43799f1e04b3bab478bbc08958105e33c0fd69e2a91e92cd1e6a7bde6bf4ddcdb0da6fcf2addad48426f86ba0764d797a25054256cf1d6979d297ea94087363cf1db961057ca84e51b6a944efcdeae139f60c2b33ae3a020c7478a7ccd74e8b63e18a56146826b8dfdc2ed14b98db021c2a39c31959a5a9e1129b4fe4f449742", 0xf4}, {&(0x7f0000001ac0)="1f2d75060f0b11076b5dded6d96813116b5a0acf097ae0753ea1a639730f8ab8d051bdf25c47198f7b67986fc4a85d81f9b4c6187f05feb90a446525e6521598711ccbe965983de5c2c9f666f8271bddde019157a4262d43a3dae9d3fe5b7e06c781bc64bad7d6e0d03065e5f329ab4f6311d6a438d0", 0x76}, {&(0x7f0000001b40)="b422d6836cdb2b6a34ec04d9", 0xc}], 0x5}}, {{&(0x7f0000001c00)=@phonet={0x23, 0x3, 0x3f, 0x1}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000001c80)="ca213812e8429f446f253a8c1964f038a7678f90555d326a39114e6dffc73f3ae619884f797dffe98fe97a649a8ecea9e1eb062f0498343b5e2b9d9ebf16c32ddd01312fd10c719bf1215d08ff00a194903090a7f35964d559704999ec595c9f16ca0dfe2727e134782ef09ae2f0e3e300aa8809dc19ba0d82189343bf09965a180f6c46c4b4f7469ac6482ae443da4132bb69b26d87e8af7b0d274d6eb0ebb8a107eb2fdf6d603f4b2b03368cbfe9daa2a59fc98ed25ec86151d92eb2197089a8597ee53d72805421928781791d47b8565dcc03c915e6205e0ba6a31dc806f0b1b68ce717f7d48aea9c17d4091e71a881c8", 0xf2}, {&(0x7f0000001d80)="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", 0x1000}, {&(0x7f0000002d80)="8dda0908b84a4929f75c8c63484864fad7a3d658119cd468928b982ac8b0", 0x1e}], 0x3, &(0x7f0000002e00)=[{0xf8, 0x3a, 0x1, "f8ec442313a46b95332d7f5b3688589bb4c42ce5027aa52adeccae00968533a5bd0a5036cb4f6613197286b3879d29216f9e92d10316f0f881824cb33a83b8698db36f9f2e5e2bd7fee2a44bafa23abb916947d2db9a55e6cd189d87bd37c5a6e3bd1796c2cdfbd78a6d7e5fe345f80d7f943546f9f193ccde4082df0db53b85eb6da6c47802deea4e3f8c0164d057890ef70778b411b9fa3fb59beb4169d148995a623c53af374618f846e338f9983aa6bb344b9ade155d2ab594f433ce42d9606dfe0553dc04c422f2b11ff70bd55adfdb08e4e3924321f7fd8443148b40c86a43"}, {0x48, 0xff, 0x8, "95f3b370d1d13032d5497f72776a6173cd884bdc915d1d83452ba4a8365586aba0fbe2bb4bd9bd1fc8a7dce85318dd4698a1c9f8e1"}, {0x108, 0x10f, 0x5, "be572e62bfeb71f6482960334d227a850fecf3caf13b819b04e486e7e7cb9f00556b9784524a5460e66f69d0c012597d70ae5f5f91ed41af40a203e6bb6cbc23bbc0754318a48fde1b55879f18ebcaeea50eef9b1b409444793945c30e866f578a7c8361800d90c8551c31e5c9d5396453058cef13ae16a3aab969bb76b5511c516af630bcae613de67c781edef18cee55e6123c4bd6de06e0bcf6896d2ce48b9cf9c07bb3776d3c5dde54d4a4c89451c460a3dd49e210ecc9547b0975f2047f29a0b548e1ea0d4bfce1ac91d6bd1c1fafe16a6adbd4e13947de78a53ef941d522ec3a1fa52839fbf4ee3d673b06b8d2ec43"}, {0x110, 0x108, 0x7ff, "902550a27675df620d43e9faef461b85dd281bb6b3bac60734d5f020cc368b5fbf4eeda1788cf5baec1a8e06f530317a712220f6ac7a7c3f8f77748bdaff04ed92b4b4f806fa13551926b2bb472ec4881abdba41f31b0122f4c5aa6abb9bb88b717e764238100bb9d366478f2a3d4591d223910e34edee347c30f7b44809e4ac798513f53f48807cf5e97f450e4f898f53d9da882f9c147ac5f800b47750a94c70ecd29bdf1fbbe00b24ffd14fc367adafc49951354566201e31b560bc3e23e45496b595b82cec40e988a0da0d75492b8eefc19272fde23c4c499fab19f3a9ce03ff58a879a51097092cd326f4d6cff48e3608f12f137f13273f4ed1f3"}, {0x80, 0x113, 0x7, "36aef6c56456a0cafe82d33adce33edf224d672d641abdd43fbd12bd0f6a238c973867ab399f3eadf6c1321b75ed541d52d77060baab9e6787011dc31bd968c656fcaf401c67c3521ccbd84d55c2fedc6920863ceece14c1a37ad914e9a3b30772183def0a9e09be3310816b690d29"}, {0xf8, 0x119, 0x7, "91288f299286374295639f6185081b3d2aea337354d135c12b368b832bc9bb46b20e9a4fcc4741a358e04e87538f3c743b15fac137fa5f5024855e45955d49d70539401cb3b552f7e9744ee74686135d48a79c4284cbdb02e494410996842a9b48e05ab7c32eac447933c518caf8e436bd59e66be4c57bef9de9e8caaf6102b4802a30c86ce28bec4f851da3a698ca1e7f7c386cd6625b7f22774a406dcc92ce7eab74ef24c529ec6e4949daf6f07af05f6cf4287945f86dd0804623dfdd38efcbe41f5694937d574dcc5f9e21e6a51f59ee61e3ab330ed837cec2beef68c0e2411c7ac4"}, {0xf8, 0x391, 0x6, "f502e338a7e4de40fea88c7a07b11f3ca30fc5c6ba09ee7a6089f6adf2dee33a6e68264fe8ddf1d2b1ef51d6036d4f8e6bcd6a3669024b0a220c1aaef3b15732d242b432b76c158882daee1cfa96477509a1e9cf27e12896f02a328de35c9ddb8a0547d1eb63d9505820137d7422698a54d7a9713c7ae73d68744455228ff4c68aa0a587139dbb388d170fb178197c650ed303a91e05e5dae1c97c1fb53411f099c2a34508c35258b5b7f721be403ee6ed070176350df562cd9fbf7ef0b7156ecd8adc019aa4a63af9aed2c625d4d54e6a13a6a5969c9d52a0ab145df722e67a5c1b69"}, {0xc8, 0x110, 0x7, "7bf85d03abc4ae51db6e9be8092957b188a5faec3001f3a3f242fdfaef202bb09e7210381354bba8079e89df66308e98cbcdf8a46965c275fa25553db3a6c2864034a5384ad247d524ccc0e67292ccb01856f341723f8274590de913e13f2b2f5e1a645c1ecf0a0a023b8c9b8bbf7f458ac0dafb41e47f32c642ad9f0b685c7717cff2acc0c7730777e604191466c68c0f7235d2957b02528a023bcda5e87f6a1d512cc0eaf1ca0c72e25195d6ef14ebb9352f1a60ca"}, {0xd8, 0x103, 0x5, "517796bc74c587d94acde9dce0523f0119f70115994b7aa9fb25c05ab2d67cd7d622f933497a7aeb836e559bfc6252f1559d4231f6fff62ab33f44ea6bca93d9308fbcdcb89b8c34183ca0e5f288e5ee2a6b1d222c9732f89ab6658b63fa88c4a5b11f3fe49dd273e91621db33deeb0fcff406a3b66aa28707a6c06f8486897cf9ae782cb2419c9038b915befe95e8de0004ff4799348051575001aa81115e6240e0fa5dfcae878bd2154e137d5ec12852411066405676eee8433a352706c73164c664e9c1079f"}, {0x70, 0x84, 0x1, "513d5bd30fb051f84997f46bea6934dc9ddd023ccbe4059e942547e853db30c250236e751da93622fa652c84f3e9ab322e3ed00430f2ce4602dc5693830a21652d029b0345b1eab29a2509f05ec7626aa34cd9be0b87f590388e"}], 0x7d8}}], 0x4, 0x80)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x6, 0x6e55, 0x2})

04:41:32 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:32 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

[ 1284.399037] loop2: detected capacity change from 0 to 40
[ 1284.494827] syz-executor.2: attempt to access beyond end of device
[ 1284.494827] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1284.496274] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1296.605749] loop2: detected capacity change from 0 to 40
04:41:44 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:44 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x2000000, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8000, @any, 0xd9, 0x1}, 0xe)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x32, 0x4)

04:41:44 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:44 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:44 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

04:41:44 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=""/107, &(0x7f0000000100)=0x6b)

04:41:44 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:44 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:41:44 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0xc, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000100)={{0x80, 0xffffc44c}, 0x100, './file0\x00'})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0xc000, @none, 0xe71}, 0xe)

04:41:44 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

04:41:44 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:44 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

[ 1296.779822] syz-executor.2: attempt to access beyond end of device
[ 1296.779822] loop2: rw=2049, sector=44, nr_sectors = 80 limit=40
04:41:44 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

[ 1296.855492] syz-executor.2: attempt to access beyond end of device
[ 1296.855492] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1296.856878] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:41:44 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0), 0xe)

04:41:44 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:44 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:41:45 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:45 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0), 0xe)

04:41:45 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:45 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:45 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:45 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1297.608244] loop2: detected capacity change from 0 to 40
04:41:45 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0), 0xe)

04:41:45 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:41:45 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:45 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x401, 0x20, 0x3, 0x81, 0x8, 0x2, 0x2}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

[ 1298.294866] syz-executor.2: attempt to access beyond end of device
[ 1298.294866] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1298.298205] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:41:58 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:58 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:58 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

[ 1311.032018] loop2: detected capacity change from 0 to 40
04:41:58 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:58 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:58 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:58 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:58 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:58 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:58 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1311.354563] syz-executor.2: attempt to access beyond end of device
[ 1311.354563] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1311.355740] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:41:59 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:59 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:59 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:41:59 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1311.712652] loop2: detected capacity change from 0 to 40
04:41:59 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1312.138927] syz-executor.2: attempt to access beyond end of device
[ 1312.138927] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:42:17 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:17 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:17 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:17 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:17 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:17 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:42:17 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1329.479771] loop2: detected capacity change from 0 to 40
04:42:17 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:42:17 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:17 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:42:17 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:42:17 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:42:17 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:42:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:18 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1330.452035] kworker/u4:9: attempt to access beyond end of device
[ 1330.452035] loop2: rw=1, sector=52, nr_sectors = 72 limit=40
[ 1330.454471] kworker/u4:9: attempt to access beyond end of device
[ 1330.454471] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1330.456337] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1330.599374] loop2: detected capacity change from 0 to 40
[ 1331.109552] syz-executor.2: attempt to access beyond end of device
[ 1331.109552] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1331.113851] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:42:34 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:34 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:34 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:34 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:34 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

04:42:34 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:34 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:34 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1346.522282] loop2: detected capacity change from 0 to 40
04:42:34 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

04:42:34 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

04:42:34 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0), 0xe)

04:42:34 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0), 0xe)

04:42:34 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0), 0xe)

[ 1347.303605] syz-executor.2: attempt to access beyond end of device
[ 1347.303605] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1347.307373] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:42:35 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_setup(0x46ac, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffff, &(0x7f00000000c0)=[r0, r4], 0x2, 0x0, 0x1}, 0x3e3)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r6 = syz_open_pts(0xffffffffffffffff, 0x100282)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r7, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
ioctl$TIOCGICOUNT(r7, 0x545d, 0x0)
write(r6, &(0x7f0000000080)="3cc125a72e504d3310ad3b7ac975a632359e62", 0x13)
setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000100), 0x1)
bind$bt_l2cap(r7, &(0x7f0000000280)={0x1f, 0x7f, @any, 0xfff9}, 0xe)
fcntl$getownex(r5, 0x10, &(0x7f0000000000))

04:42:35 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:35 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1347.624338] loop2: detected capacity change from 0 to 40
[ 1348.126697] syz-executor.2: attempt to access beyond end of device
[ 1348.126697] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1348.129888] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:42:47 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:47 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:48 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:48 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:48 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:48 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:48 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:48 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1360.394120] loop2: detected capacity change from 0 to 40
[ 1360.895038] syz-executor.2: attempt to access beyond end of device
[ 1360.895038] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:42:48 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1361.072911] loop2: detected capacity change from 0 to 40
[ 1361.215845] syz-executor.2: attempt to access beyond end of device
[ 1361.215845] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:42:48 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:48 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1361.302614] kworker/u4:0: attempt to access beyond end of device
[ 1361.302614] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1361.304392] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1361.307999] kworker/u4:0: attempt to access beyond end of device
[ 1361.307999] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1361.309873] kworker/u4:0: attempt to access beyond end of device
[ 1361.309873] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1361.311651] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:42:48 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:49 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:49 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:42:49 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1361.484329] loop2: detected capacity change from 0 to 40
[ 1361.815291] syz-executor.2: attempt to access beyond end of device
[ 1361.815291] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
[ 1377.338470] loop2: detected capacity change from 0 to 40
04:43:04 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:04 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:04 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:04 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:04 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:04 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:04 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:04 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1377.474427] syz-executor.2: attempt to access beyond end of device
[ 1377.474427] loop2: rw=2049, sector=44, nr_sectors = 80 limit=40
[ 1377.478426] syz-executor.2: attempt to access beyond end of device
[ 1377.478426] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1377.479606] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:43:05 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1377.737152] loop2: detected capacity change from 0 to 40
[ 1377.858812] syz-executor.2: attempt to access beyond end of device
[ 1377.858812] loop2: rw=2049, sector=44, nr_sectors = 16 limit=40
[ 1377.925363] kworker/u4:1: attempt to access beyond end of device
[ 1377.925363] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1377.926316] kworker/u4:1: attempt to access beyond end of device
[ 1377.926316] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1377.927158] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:43:05 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1378.001326] loop2: detected capacity change from 0 to 40
04:43:05 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:05 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1378.620792] syz-executor.2: attempt to access beyond end of device
[ 1378.620792] loop2: rw=2049, sector=44, nr_sectors = 80 limit=40
[ 1378.629395] syz-executor.2: attempt to access beyond end of device
[ 1378.629395] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1378.633932] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:43:19 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:19 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:19 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:19 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:19 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:19 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, 0x0, &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1391.550945] loop2: detected capacity change from 0 to 40
04:43:20 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, 0x0, &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1393.258185] kworker/u4:0: attempt to access beyond end of device
[ 1393.258185] loop2: rw=1, sector=44, nr_sectors = 80 limit=40
[ 1393.264032] kworker/u4:0: attempt to access beyond end of device
[ 1393.264032] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1393.266601] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:43:20 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(0x0, &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0, &(0x7f0000000340)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1393.405382] loop2: detected capacity change from 0 to 40
[ 1393.711281] syz-executor.2: attempt to access beyond end of device
[ 1393.711281] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1393.714621] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:43:34 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(0x0, &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0, &(0x7f0000000340)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:34 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, 0x0, &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:34 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, 0x0, &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:34 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x7, 0x6, 0x5, 0x0, 0x800, 0xf618, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1d1, 0x2, @perf_config_ext={0x1, 0x10000}, 0x5d020, 0x1, 0x0, 0x6, 0x8, 0xfffff9d9, 0x3f, 0x0, 0x6, 0x0, 0x7}, 0xffffffffffffffff, 0x1, r0, 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000100))
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
close(r2)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000340)={0x3, 0x93, 0x3ff, 0x2, 0x5})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x40, 0x3, 0xe3, 0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x38d5, 0x0, @perf_config_ext={0x1, 0x4}, 0x40000, 0x4, 0x66f, 0x0, 0x3, 0x7, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0x9, r1, 0x1)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r5=>r2, {0x2}}, './file0\x00'})
kcmp(0x0, 0x0, 0x6, r4, r5)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x58}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xc800}, 0x4004010)

04:43:34 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:34 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', 0x0], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:34 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:34 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

[ 1406.429838] loop2: detected capacity change from 0 to 40
04:43:34 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:43:34 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe) (fail_nth: 1)

[ 1406.603051] FAULT_INJECTION: forcing a failure.
[ 1406.603051] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1406.604458] CPU: 1 PID: 8669 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230214 #1
[ 1406.605368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1406.606315] Call Trace:
[ 1406.606607]  <TASK>
[ 1406.606877]  dump_stack_lvl+0xc1/0xf0
[ 1406.607464]  should_fail_ex+0x4b4/0x5b0
[ 1406.607940]  _copy_from_user+0x2e/0x180
[ 1406.608412]  move_addr_to_kernel.part.0+0x31/0x110
[ 1406.608989]  __sys_connect+0xde/0x1a0
[ 1406.609437]  ? __pfx___sys_connect+0x10/0x10
[ 1406.609980]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1406.610650]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1406.611321]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1406.611989]  ? fput+0x2f/0x1a0
[ 1406.612377]  ? ksys_write+0x1a7/0x260
[ 1406.612836]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1406.613443]  __x64_sys_connect+0x73/0xb0
[ 1406.613951]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1406.614547]  do_syscall_64+0x3f/0x90
[ 1406.615006]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1406.615616] RIP: 0033:0x7fe41f5e1b19
[ 1406.616061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1406.618118] RSP: 002b:00007fe41cb57188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1406.618990] RAX: ffffffffffffffda RBX: 00007fe41f6f4f60 RCX: 00007fe41f5e1b19
[ 1406.619805] RDX: 000000000000000e RSI: 00000000200001c0 RDI: 0000000000000004
[ 1406.620614] RBP: 00007fe41cb571d0 R08: 0000000000000000 R09: 0000000000000000
[ 1406.621422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1406.622248] R13: 00007ffffa9923bf R14: 00007fe41cb57300 R15: 0000000000022000
[ 1406.623066]  </TASK>
04:43:34 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:43:34 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe) (fail_nth: 1)

[ 1406.693648] syz-executor.2: attempt to access beyond end of device
[ 1406.693648] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1406.694865] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1406.708200] FAULT_INJECTION: forcing a failure.
[ 1406.708200] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1406.709642] CPU: 1 PID: 8674 Comm: syz-executor.7 Not tainted 6.2.0-rc8-next-20230214 #1
[ 1406.710586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1406.711509] Call Trace:
[ 1406.711816]  <TASK>
[ 1406.712094]  dump_stack_lvl+0xc1/0xf0
[ 1406.712571]  should_fail_ex+0x4b4/0x5b0
[ 1406.713065]  _copy_from_user+0x2e/0x180
[ 1406.713545]  move_addr_to_kernel.part.0+0x31/0x110
[ 1406.714138]  __sys_connect+0xde/0x1a0
[ 1406.714611]  ? __pfx___sys_connect+0x10/0x10
[ 1406.715147]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1406.715838]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1406.716543]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1406.717226]  ? fput+0x2f/0x1a0
[ 1406.717634]  ? ksys_write+0x1a7/0x260
[ 1406.718124]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1406.718748]  __x64_sys_connect+0x73/0xb0
[ 1406.719236]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1406.719843]  do_syscall_64+0x3f/0x90
[ 1406.720304]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1406.720918] RIP: 0033:0x7ffaddb3ab19
[ 1406.721351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1406.723369] RSP: 002b:00007ffadb0b0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1406.724226] RAX: ffffffffffffffda RBX: 00007ffaddc4df60 RCX: 00007ffaddb3ab19
[ 1406.725030] RDX: 000000000000000e RSI: 00000000200001c0 RDI: 0000000000000004
[ 1406.725838] RBP: 00007ffadb0b01d0 R08: 0000000000000000 R09: 0000000000000000
[ 1406.726635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1406.727428] R13: 00007ffdb7a09eef R14: 00007ffadb0b0300 R15: 0000000000022000
[ 1406.728248]  </TASK>
04:43:34 executing program 6:
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:43:34 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe) (fail_nth: 2)

04:43:34 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1406.881093] loop2: detected capacity change from 0 to 40
[ 1406.946691] syz-executor.2: attempt to access beyond end of device
[ 1406.946691] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
[ 1407.081863] kworker/u4:6: attempt to access beyond end of device
[ 1407.081863] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1407.082925] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1407.083598] kworker/u4:6: attempt to access beyond end of device
[ 1407.083598] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1407.084502] kworker/u4:6: attempt to access beyond end of device
[ 1407.084502] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1407.085312] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1407.660668] FAULT_INJECTION: forcing a failure.
[ 1407.660668] name failslab, interval 1, probability 0, space 0, times 1
[ 1407.662395] CPU: 1 PID: 8677 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230214 #1
[ 1407.663561] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1407.664729] Call Trace:
[ 1407.665119]  <TASK>
[ 1407.665470]  dump_stack_lvl+0xc1/0xf0
[ 1407.666084]  should_fail_ex+0x4b4/0x5b0
[ 1407.666600]  ? taskstats_exit+0x5f9/0xaf0
[ 1407.667140]  should_failslab+0x9/0x20
[ 1407.667631]  kmem_cache_alloc+0x5a/0x320
[ 1407.668148]  ? acct_collect+0x652/0x880
[ 1407.668657]  taskstats_exit+0x5f9/0xaf0
[ 1407.669194]  ? acct_update_integrals+0x36e/0x430
[ 1407.669819]  ? __pfx_taskstats_exit+0x10/0x10
[ 1407.670407]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 1407.671081]  ? acct_update_integrals+0x36e/0x430
[ 1407.671703]  do_exit+0x849/0x2800
[ 1407.672155]  ? find_held_lock+0x2c/0x110
[ 1407.672679]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1407.673411]  ? __pfx_do_exit+0x10/0x10
[ 1407.673915]  ? do_raw_spin_lock+0x125/0x270
[ 1407.674474]  do_group_exit+0xd4/0x2a0
[ 1407.674982]  get_signal+0x23c8/0x2450
[ 1407.675492]  ? __pfx_task_work_add+0x10/0x10
[ 1407.676062]  ? __pfx_get_signal+0x10/0x10
[ 1407.676606]  arch_do_signal_or_restart+0x79/0x590
[ 1407.677217]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1407.677909]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1407.678657]  ? exit_to_user_mode_prepare+0xc8/0x180
[ 1407.679307]  exit_to_user_mode_prepare+0xeb/0x180
[ 1407.679927]  syscall_exit_to_user_mode+0x1d/0x50
[ 1407.680536]  do_syscall_64+0x4c/0x90
[ 1407.681027]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1407.681695] RIP: 0033:0x7fe41f5e1b19
[ 1407.682166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1407.684323] RSP: 002b:00007fe41cb57188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1407.685241] RAX: fffffffffffffffc RBX: 00007fe41f6f4f60 RCX: 00007fe41f5e1b19
[ 1407.686126] RDX: 000000000000000e RSI: 00000000200001c0 RDI: 0000000000000004
[ 1407.686992] RBP: 00007fe41cb571d0 R08: 0000000000000000 R09: 0000000000000000
[ 1407.687856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1407.688719] R13: 00007ffffa9923bf R14: 00007fe41cb57300 R15: 0000000000022000
[ 1407.689611]  </TASK>
04:43:47 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe) (fail_nth: 2)

04:43:47 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:43:47 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:47 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:47 executing program 6:
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:43:47 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:47 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(0x0, &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00', 0x0, &(0x7f0000000340)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1419.442719] loop2: detected capacity change from 0 to 40
04:43:47 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, 0x0, &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:47 executing program 6:
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:43:47 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

[ 1419.781488] syz-executor.2: attempt to access beyond end of device
[ 1419.781488] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1419.784285] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:43:47 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:43:47 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:43:47 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

[ 1420.120338] loop2: detected capacity change from 0 to 40
[ 1420.341995] FAULT_INJECTION: forcing a failure.
[ 1420.341995] name failslab, interval 1, probability 0, space 0, times 0
[ 1420.343506] CPU: 1 PID: 8695 Comm: syz-executor.7 Not tainted 6.2.0-rc8-next-20230214 #1
[ 1420.344501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1420.345493] Call Trace:
[ 1420.345830]  <TASK>
[ 1420.346141]  dump_stack_lvl+0xc1/0xf0
[ 1420.346649]  should_fail_ex+0x4b4/0x5b0
[ 1420.347172]  ? taskstats_exit+0x5f9/0xaf0
[ 1420.347718]  should_failslab+0x9/0x20
[ 1420.348216]  kmem_cache_alloc+0x5a/0x320
[ 1420.348739]  ? acct_collect+0x652/0x880
[ 1420.349253]  taskstats_exit+0x5f9/0xaf0
[ 1420.349779]  ? acct_update_integrals+0x36e/0x430
[ 1420.350408]  ? __pfx_taskstats_exit+0x10/0x10
[ 1420.351005]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 1420.351694]  ? acct_update_integrals+0x36e/0x430
[ 1420.352320]  do_exit+0x849/0x2800
[ 1420.352776]  ? find_held_lock+0x2c/0x110
[ 1420.353315]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1420.354071]  ? __pfx_do_exit+0x10/0x10
[ 1420.354576]  ? do_raw_spin_lock+0x125/0x270
[ 1420.355158]  do_group_exit+0xd4/0x2a0
[ 1420.355677]  get_signal+0x23c8/0x2450
[ 1420.356212]  ? __pfx_task_work_add+0x10/0x10
[ 1420.356814]  ? __pfx_get_signal+0x10/0x10
[ 1420.357394]  arch_do_signal_or_restart+0x79/0x590
[ 1420.358044]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1420.358751]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1420.359544]  ? exit_to_user_mode_prepare+0xc8/0x180
[ 1420.360228]  exit_to_user_mode_prepare+0xeb/0x180
[ 1420.360879]  syscall_exit_to_user_mode+0x1d/0x50
[ 1420.361518]  do_syscall_64+0x4c/0x90
[ 1420.362033]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1420.362719] RIP: 0033:0x7ffaddb3ab19
[ 1420.363212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1420.365504] RSP: 002b:00007ffadb0b0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1420.366494] RAX: fffffffffffffffc RBX: 00007ffaddc4df60 RCX: 00007ffaddb3ab19
[ 1420.367393] RDX: 000000000000000e RSI: 00000000200001c0 RDI: 0000000000000004
[ 1420.368308] RBP: 00007ffadb0b01d0 R08: 0000000000000000 R09: 0000000000000000
[ 1420.369220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1420.370143] R13: 00007ffdb7a09eef R14: 00007ffadb0b0300 R15: 0000000000022000
[ 1420.371081]  </TASK>
[ 1420.874611] syz-executor.2: attempt to access beyond end of device
[ 1420.874611] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1420.878808] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:44:00 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:44:00 executing program 6:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:44:00 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:00 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, 0x0, &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:00 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:00 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:00 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, 0x0, &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:00 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x2}, 0xe)

[ 1432.491236] loop2: detected capacity change from 0 to 40
04:44:00 executing program 6:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

04:44:00 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x9}, 0xe)

[ 1432.603012] syz-executor.2: attempt to access beyond end of device
[ 1432.603012] loop2: rw=2049, sector=44, nr_sectors = 80 limit=40
[ 1432.608601] syz-executor.2: attempt to access beyond end of device
[ 1432.608601] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1432.609621] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:44:00 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:00 executing program 6:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000001100)=0x6)

[ 1432.728997] loop2: detected capacity change from 0 to 40
[ 1432.789046] syz-executor.2: attempt to access beyond end of device
[ 1432.789046] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:44:00 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:00 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

[ 1433.008896] loop2: detected capacity change from 0 to 40
04:44:00 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:44:00 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

[ 1433.176045] syz-executor.2: attempt to access beyond end of device
[ 1433.176045] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1433.177225] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:44:13 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:44:13 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, 0x0, &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:13 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:44:13 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:13 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:13 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x2}, 0xe)

04:44:13 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:13 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

[ 1445.914702] loop2: detected capacity change from 0 to 40
04:44:13 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x9}, 0xe)

04:44:13 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

[ 1446.014515] syz-executor.2: attempt to access beyond end of device
[ 1446.014515] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1446.015714] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:44:13 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:13 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:13 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

[ 1446.127641] loop2: detected capacity change from 0 to 40
04:44:13 executing program 5:
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)

04:44:13 executing program 5:
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)

[ 1446.266829] syz-executor.2: attempt to access beyond end of device
[ 1446.266829] loop2: rw=2049, sector=44, nr_sectors = 80 limit=40
[ 1446.269873] syz-executor.2: attempt to access beyond end of device
[ 1446.269873] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1446.271203] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:44:13 executing program 5:
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)

04:44:26 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:44:26 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:44:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:26 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:44:26 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5, @any, 0x2}, 0xe)

04:44:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:26 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1458.863737] loop2: detected capacity change from 0 to 40
04:44:26 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, 0x0, &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:26 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:44:26 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

[ 1458.995230] syz-executor.2: attempt to access beyond end of device
[ 1458.995230] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1458.997094] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:44:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', 0x0])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:26 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

[ 1459.121852] loop2: detected capacity change from 0 to 40
04:44:26 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)

04:44:26 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)

[ 1459.280956] syz-executor.2: attempt to access beyond end of device
[ 1459.280956] loop2: rw=2049, sector=44, nr_sectors = 80 limit=40
[ 1459.291649] syz-executor.2: attempt to access beyond end of device
[ 1459.291649] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1459.292749] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:44:26 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)

04:44:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', 0x0])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1459.379491] loop2: detected capacity change from 0 to 40
[ 1459.489781] syz-executor.2: attempt to access beyond end of device
[ 1459.489781] loop2: rw=2049, sector=44, nr_sectors = 80 limit=40
[ 1459.492256] syz-executor.2: attempt to access beyond end of device
[ 1459.492256] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1459.493807] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:44:39 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5, @any, 0x0, 0x2}, 0xe)

04:44:39 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', 0x0])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:39 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:39 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:39 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:39 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5, @any, 0x2}, 0xe)

04:44:39 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:39 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1472.298390] loop2: detected capacity change from 0 to 40
04:44:40 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

[ 1472.420579] syz-executor.2: attempt to access beyond end of device
[ 1472.420579] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:44:40 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0x7ffffffff000)

[ 1472.586523] kworker/u4:9: attempt to access beyond end of device
[ 1472.586523] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1472.587714] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1472.588571] kworker/u4:9: attempt to access beyond end of device
[ 1472.588571] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
04:44:40 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1472.592797] kworker/u4:9: attempt to access beyond end of device
[ 1472.592797] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1472.593918] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:44:40 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d37fe37e12711bdb00000104000006000a000073f079b40bbd9ef5638f7a0af25ed51c5be9a2ea9163d5d4e3972e1c1a9e08adfaff706cf42300"/69], 0x2c}}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x4}, 0xe)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x4)

04:44:40 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @any, 0x0, 0x2}, 0xe)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:44:40 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', 0x0])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:40 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:40 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

[ 1473.315038] syz-executor.0 (8852) used greatest stack depth: 23136 bytes left
04:44:40 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:41 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:41 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5, @any, 0x0, 0x2}, 0xe)

04:44:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:41 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0x7ffffffff000)

[ 1473.636177] perf: interrupt took too long (2510 > 2500), lowering kernel.perf_event_max_sample_rate to 79000
[ 1473.649462] loop2: detected capacity change from 0 to 40
[ 1473.694739] perf: interrupt took too long (3168 > 3137), lowering kernel.perf_event_max_sample_rate to 63000
04:44:41 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5, @any, 0x8, 0x2}, 0xe)

[ 1473.780504] perf: interrupt took too long (3964 > 3960), lowering kernel.perf_event_max_sample_rate to 50000
[ 1473.843109] syz-executor.2: attempt to access beyond end of device
[ 1473.843109] loop2: rw=2049, sector=44, nr_sectors = 80 limit=40
[ 1473.859338] syz-executor.2: attempt to access beyond end of device
[ 1473.859338] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1473.861994] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:44:41 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x6, @none, 0x4, 0x2}, 0xe)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001000000180000000cf7d7e4c50145d74b43d5411afb3f78fec0c221b4abc678c8e8b41bfc037e44b2ac7c7abeeb8928705cb1567aad35022d468dfe10e98aa384b5bcd237d0da877d03672813c9395f7fc76886cba34ab7558aaa70e1a6693733f9e83592307cb0f27ad6aed5a5d5e7f03aecd68b0916091359f4a6eecd80d4085e673afeb74aff37f2a265b0b55fc5b8ff1af60c67a6e666d4190ef25d8e611835d3b820a65935d7a7dc6539a19c2072670a0cbcb4a50e", @ANYRES32=r1, @ANYBLOB="01000000000000002e2f66696c653000"])
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:44:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1473.936471] perf: interrupt took too long (4962 > 4955), lowering kernel.perf_event_max_sample_rate to 40000
04:44:41 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f0000000000)="d9dccfc93c34ac222bde929cb5c1361e2949990049fb033044842f3381ea16c10d44ce7ce3dfc5b7871373cc7cef9beb3ad8b6d031dfe206b5dceae45128b04fd7299a18a8d188664395ca6fd589fe2531d30e31211cc289ccd6cd0f82059df9afbd8d07d4a9e1b3b762f4adb9e8534b0dd4a570d8c68f7b442b6ae275b509e5f3999d7a6e1a1355aaea4a19f5609a23ea85146fd74d687e1f7eb7173f05fc3f7052051d3ebd3f05b2a54c0276d7e5efd6d58998097edc4a513353de19f93282a1af48864a4528c4508ad2c38ab6bf6b584af8d763100a86d8352a7e2e545410d64d")
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

[ 1474.061743] loop2: detected capacity change from 0 to 40
[ 1474.151878] perf: interrupt took too long (6209 > 6202), lowering kernel.perf_event_max_sample_rate to 32000
[ 1474.235833] syz-executor.2: attempt to access beyond end of device
[ 1474.235833] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1474.237457] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:44:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', 0x0, &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1474.403616] loop2: detected capacity change from 0 to 40
[ 1474.438589] syz-executor.2: attempt to access beyond end of device
[ 1474.438589] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
[ 1474.461860] kworker/u4:3: attempt to access beyond end of device
[ 1474.461860] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1474.463139] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1474.463995] kworker/u4:3: attempt to access beyond end of device
[ 1474.463995] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1474.465238] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:44:55 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), 0x4)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:44:55 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x2}, 0xffffff84)
write(r0, &(0x7f0000000000)="ff6308f0916604d62586660111f604feee26c174088e7d2626abeaf3e4c835bf01a3e130e86afe", 0x27)

04:44:55 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', 0x0, &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:55 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', 0x0])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:55 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:55 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:55 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:55 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', 0x0, &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1487.966865] loop2: detected capacity change from 0 to 40
04:44:55 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4, 0x69}}, './file0\x00'})
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xd66}, 0xe)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x3, @none, 0x3}, 0xe)

[ 1488.131455] bio_check_eod: 1 callbacks suppressed
[ 1488.131469] syz-executor.2: attempt to access beyond end of device
[ 1488.131469] loop2: rw=2049, sector=44, nr_sectors = 16 limit=40
04:44:55 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x7, @any, 0x7, 0x2}, 0xe)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x9, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000001c0)=')', 0x1}])
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'})
lsetxattr(&(0x7f00000000c0)='.\x00', &(0x7f0000000140)=@known='security.selinux\x00', &(0x7f0000000180)='\x00', 0x1, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000140)={'ip6tnl0\x00', {0x2, 0x0, @private}})
write$binfmt_script(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="2321202e2f03696c6530202b2b2d2cba2126215d2d2c0a00"/38], 0x26)
connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1}, 0xe)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x8, 'veth0_virt_wifi\x00', {'veth1_to_bond\x00'}, 0x400})
getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x8)

[ 1488.199783] perf: interrupt took too long (7766 > 7761), lowering kernel.perf_event_max_sample_rate to 25000
04:44:55 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', 0x0, &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1488.279859] kworker/u4:10: attempt to access beyond end of device
[ 1488.279859] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1488.281833] kworker/u4:10: attempt to access beyond end of device
[ 1488.281833] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1488.283362] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1488.307813] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1488.308593] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1488.309057] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1488.309576] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00
[ 1488.310173] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2
[ 1488.337679] SELinux:  Context  is not valid (left unmapped).
[ 1488.350189] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1488.350895] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1488.351447] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1488.351887] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
[ 1488.352420] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2
[ 1488.352977] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1488.353523] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1488.354038] Buffer I/O error on dev sr0, logical block 2, async page read
[ 1488.354593] Buffer I/O error on dev sr0, logical block 3, async page read
[ 1488.355136] Buffer I/O error on dev sr0, logical block 4, async page read
[ 1488.355648] Buffer I/O error on dev sr0, logical block 5, async page read
[ 1488.356244] Buffer I/O error on dev sr0, logical block 6, async page read
[ 1488.356744] Buffer I/O error on dev sr0, logical block 7, async page read
[ 1488.367941] loop2: detected capacity change from 0 to 40
[ 1488.408940] syz-executor.2: attempt to access beyond end of device
[ 1488.408940] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
[ 1488.454591] kworker/u4:3: attempt to access beyond end of device
[ 1488.454591] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1488.456437] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1488.458359] kworker/u4:3: attempt to access beyond end of device
[ 1488.458359] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1488.461658] kworker/u4:3: attempt to access beyond end of device
[ 1488.461658] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
04:44:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1488.514989] loop2: detected capacity change from 0 to 40
[ 1488.573649] syz-executor.2: attempt to access beyond end of device
[ 1488.573649] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
[ 1488.621860] kworker/u4:10: attempt to access beyond end of device
[ 1488.621860] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1488.623699] kworker/u4:10: attempt to access beyond end of device
[ 1488.623699] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
04:44:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1488.772286] loop2: detected capacity change from 0 to 40
[ 1488.832897] syz-executor.5 (8932) used greatest stack depth: 22960 bytes left
04:44:56 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', 0x0, &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:44:56 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {0x1}}, './file0\x00'})
preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000300)=""/220, 0xdc}, {&(0x7f0000000080)=""/89, 0x59}, {&(0x7f0000000400)=""/198, 0xc6}, {&(0x7f0000000180)=""/35, 0x23}, {&(0x7f0000000500)=""/203, 0xcb}, {&(0x7f0000000600)=""/99, 0x63}], 0x7, 0xffffffff, 0x5)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:44:56 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', 0x0])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:45:09 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
fallocate(r0, 0x10, 0x0, 0x3)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:45:09 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), 0x4)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:45:09 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:45:09 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x7, @any, 0x7, 0x2}, 0xe)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x9, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000001c0)=')', 0x1}])
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'})
lsetxattr(&(0x7f00000000c0)='.\x00', &(0x7f0000000140)=@known='security.selinux\x00', &(0x7f0000000180)='\x00', 0x1, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000140)={'ip6tnl0\x00', {0x2, 0x0, @private}})
write$binfmt_script(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="2321202e2f03696c6530202b2b2d2cba2126215d2d2c0a00"/38], 0x26)
connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1}, 0xe)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x8, 'veth0_virt_wifi\x00', {'veth1_to_bond\x00'}, 0x400})
getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x8)

04:45:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:45:09 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)

04:45:09 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', 0x0, &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:45:09 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x7, @any, 0x7, 0x2}, 0xe)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x9, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000001c0)=')', 0x1}])
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'})
lsetxattr(&(0x7f00000000c0)='.\x00', &(0x7f0000000140)=@known='security.selinux\x00', &(0x7f0000000180)='\x00', 0x1, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000140)={'ip6tnl0\x00', {0x2, 0x0, @private}})
write$binfmt_script(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="2321202e2f03696c6530202b2b2d2cba2126215d2d2c0a00"/38], 0x26)
connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1}, 0xe)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x8, 'veth0_virt_wifi\x00', {'veth1_to_bond\x00'}, 0x400})
getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x8)

[ 1502.027811] loop2: detected capacity change from 0 to 40
[ 1502.047491] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1502.048821] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1502.049783] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1502.050716] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00
[ 1502.051739] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2
[ 1502.053690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1502.054110] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1502.054689] buffer_io_error: 5 callbacks suppressed
[ 1502.054697] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1502.055913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1502.056502] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1502.057095] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1502.057907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1502.058320] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1502.058931] Buffer I/O error on dev sr0, logical block 2, async page read
[ 1502.060480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1502.060856] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1502.061500] Buffer I/O error on dev sr0, logical block 3, async page read
[ 1502.062457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1502.062824] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1502.063483] Buffer I/O error on dev sr0, logical block 4, async page read
[ 1502.064403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1502.064777] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1502.065391] Buffer I/O error on dev sr0, logical block 5, async page read
[ 1502.066416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1502.066802] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1502.067388] Buffer I/O error on dev sr0, logical block 6, async page read
[ 1502.068386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1502.068764] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1502.069341] Buffer I/O error on dev sr0, logical block 7, async page read
[ 1502.070547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1502.071400] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1502.072503] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1502.074041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1502.074866] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1502.076607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1502.078522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1502.081588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1502.087843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1502.099552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1502.103645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1502.109782] bio_check_eod: 5 callbacks suppressed
[ 1502.109804] syz-executor.2: attempt to access beyond end of device
[ 1502.109804] loop2: rw=2049, sector=44, nr_sectors = 64 limit=40
[ 1502.142796] kworker/u4:0: attempt to access beyond end of device
[ 1502.142796] loop2: rw=1, sector=108, nr_sectors = 16 limit=40
[ 1502.143867] kworker/u4:0: attempt to access beyond end of device
[ 1502.143867] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
04:45:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[0x0, &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1502.181745] loop2: detected capacity change from 0 to 40
[ 1502.206611] syz-executor.2: attempt to access beyond end of device
[ 1502.206611] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
[ 1502.236544] kworker/u4:0: attempt to access beyond end of device
[ 1502.236544] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1502.237824] kworker/u4:0: attempt to access beyond end of device
[ 1502.237824] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1502.239043] kworker/u4:0: attempt to access beyond end of device
[ 1502.239043] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
04:45:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[0x0, &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1502.294434] loop2: detected capacity change from 0 to 40
[ 1502.381923] syz-executor.2: attempt to access beyond end of device
[ 1502.381923] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
[ 1502.481728] kworker/u4:9: attempt to access beyond end of device
[ 1502.481728] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1502.483558] kworker/u4:9: attempt to access beyond end of device
[ 1502.483558] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
04:45:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[0x0, &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1502.570725] loop2: detected capacity change from 0 to 40
04:45:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1502.811496] loop2: detected capacity change from 0 to 40
04:45:10 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), 0x4)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:45:10 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:45:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:45:10 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (fail_nth: 1)

[ 1503.022101] FAULT_INJECTION: forcing a failure.
[ 1503.022101] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1503.023687] CPU: 1 PID: 9022 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230214 #1
[ 1503.024694] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1503.025693] Call Trace:
[ 1503.026025]  <TASK>
[ 1503.026323]  dump_stack_lvl+0xc1/0xf0
[ 1503.026833]  should_fail_ex+0x4b4/0x5b0
[ 1503.027370]  _copy_to_user+0x2e/0x150
[ 1503.027884]  simple_read_from_buffer+0xd0/0x170
[ 1503.028508]  proc_fail_nth_read+0x19c/0x230
[ 1503.029078]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1503.029705]  ? security_file_permission+0xb5/0xe0
[ 1503.030346]  vfs_read+0x257/0x940
[ 1503.030821]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1503.031476]  ? __pfx_vfs_read+0x10/0x10
[ 1503.032007]  ? __pfx___fget_files+0x10/0x10
[ 1503.032579]  ? __fget_files+0x270/0x480
[ 1503.033122]  ksys_read+0x12b/0x260
[ 1503.033607]  ? __pfx_ksys_read+0x10/0x10
[ 1503.034160]  do_syscall_64+0x3f/0x90
[ 1503.034650]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1503.035357] RIP: 0033:0x7f37426c169c
[ 1503.035848] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1503.038082] RSP: 002b:00007f373fc84170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1503.039083] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f37426c169c
[ 1503.039970] RDX: 000000000000000f RSI: 00007f373fc841e0 RDI: 0000000000000003
[ 1503.040868] RBP: 00007f373fc841d0 R08: 0000000000000000 R09: 0000000000000000
[ 1503.041779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1503.042662] R13: 00007ffd629a842f R14: 00007f373fc84300 R15: 0000000000022000
[ 1503.043577]  </TASK>
[ 1518.539511] FAULT_INJECTION: forcing a failure.
[ 1518.539511] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1518.540455] CPU: 0 PID: 9032 Comm: syz-executor.5 Not tainted 6.2.0-rc8-next-20230214 #1
[ 1518.541102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1518.541659] Call Trace:
[ 1518.541859]  <TASK>
[ 1518.542028]  dump_stack_lvl+0xc1/0xf0
[ 1518.542337]  should_fail_ex+0x4b4/0x5b0
[ 1518.542640]  _copy_to_user+0x2e/0x150
[ 1518.542934]  simple_read_from_buffer+0xd0/0x170
[ 1518.543301]  proc_fail_nth_read+0x19c/0x230
[ 1518.543634]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1518.543984]  ? security_file_permission+0xb5/0xe0
[ 1518.544354]  vfs_read+0x257/0x940
[ 1518.544615]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1518.544973]  ? __pfx_vfs_read+0x10/0x10
[ 1518.545267]  ? __pfx___fget_files+0x10/0x10
[ 1518.545604]  ? __fget_files+0x270/0x480
[ 1518.545901]  ksys_read+0x12b/0x260
[ 1518.546179]  ? __pfx_ksys_read+0x10/0x10
[ 1518.546486]  do_syscall_64+0x3f/0x90
[ 1518.546777]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1518.547152] RIP: 0033:0x7f5d90cb669c
[ 1518.547441] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1518.548662] RSP: 002b:00007f5d8e279170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1518.549229] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f5d90cb669c
[ 1518.549748] RDX: 000000000000000f RSI: 00007f5d8e2791e0 RDI: 0000000000000003
[ 1518.550272] RBP: 00007f5d8e2791d0 R08: 0000000000000000 R09: 0000000000000000
[ 1518.550791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1518.551319] R13: 00007fff0186436f R14: 00007f5d8e279300 R15: 0000000000022000
[ 1518.551854]  </TASK>
04:45:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:45:26 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:45:26 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100)) (fail_nth: 1)

04:45:26 executing program 7:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x1}}, './file0\x00'})
recvfrom(r1, &(0x7f0000000040)=""/22, 0x16, 0x100, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80)

04:45:26 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:45:26 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), 0x4)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:45:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1518.568274] loop2: detected capacity change from 0 to 40
04:45:26 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=<r2=>0x0)
r3 = geteuid()
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000400)={{0x2, 0x0, 0x0, 0x0, r4, 0x1, 0x2}, 0x2, 0xab9c, 0x0, 0x0, 0x0, 0x0, 0x1ff})
getresgid(&(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0), &(0x7f0000000100))
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {}, [{0x2, 0x2, 0xee01}, {0x2, 0x4, 0xee00}, {0x2, 0x2, r1}, {0x2, 0x5, r2}, {0x2, 0x6, r3}, {0x2, 0x1, 0xee01}], {0x4, 0x5}, [{0x8, 0x7, 0xee00}, {0x8, 0x2}, {0x8, 0x7, r4}, {0x8, 0x2, r5}], {0x10, 0x3}, {0x20, 0x4}}, 0x74, 0x2)

04:45:26 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20048000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0)

04:45:26 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

[ 1518.717041] bio_check_eod: 6 callbacks suppressed
[ 1518.717760] kworker/u4:2: attempt to access beyond end of device
[ 1518.717760] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1518.719258] buffer_io_error: 14 callbacks suppressed
[ 1518.719273] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1520.649230] Bluetooth: hci5: command 0x0405 tx timeout
04:45:39 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
pread64(r0, &(0x7f00000000c0)=""/122, 0x7a, 0x1)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x80, @any, 0x3ff}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="2e2f66696c65300040a27da00450d8d7aa38818e4d6261b0722b7a5e329b67b3e11661dad208a25e43cb08ce46a6faad28f9c5da34bfe7c352fe2f8e44165fd3c58588f428aa638f257af4d49732c765aa8337fbf9aa0a64e01c3741fd90a9f6462c3e68a840846464424c149b2f69efd93e26f46884ce4891b91b57e41e9d0eed790de4d79abd767f4f2c25e41398ef9ae85f23c7fa4ccbd3ccee523084f94c2db47eb4bf4557f5fcf257a9a3a23abfec4291fa340f0a79587020581393a2cf0000000000000000"])
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x2, @any, 0xd02, 0x1}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x1ff}}, './file0\x00'})
setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140)=0x3, 0x4)

04:45:39 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000200))
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r2 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x180000000, 0xa, &(0x7f0000000800)=[{&(0x7f00000000c0)="8b8d1294bb6dfb9c7ebcd4d2b9702f3d5408a9567a0dd2f397ee395fcd", 0x1d, 0x6}, {&(0x7f0000000400)="140f1a8d7ef5a0bb7625b57f6b4db05335bfa4dc28d180ff5392c480870bee9b49a73c8a62413a8205bd84bd783b00632e6f1efad9135f4fad9578b99d3edcab22c8919344b6957ce6a4dc21f469c174fade591f920a49dc2d0936d70f6f0a412ebc60bf52eb4e533fe5ee1fb3e06198ebca11da2e4a14f16bbac81423e6df54b24884dcb3a836ca55e9eaaf5c2d927b2ea5eb780efb2f915f40b3796ddbe08b7382aae64e75452519b496de50bb7c91888f521421d490cc6955001a77ec03878d634cff90580d356ad98e77a7d5bf017f9cc58dffeda3c888c7f8d7047274f9", 0xe0, 0xfff}, {&(0x7f0000000100)="74ac2a7c9959cdddae1f4131d0da6edd8dbdc9f43987572d6163fafe52eae6a02e841afb834147578786a782a1631d57557e5fb98b27704556854bc983a6ee47b6aa98cd8a72728097f6420dc4e1d3277e5ba9dff363a18497f5f05b69d990b21002402ea6b93d99c29f926cef7c23c454f82aee21c7ce751029447437b9bbf4bbda60cf734c56a7a237c8f4e146b72dc3ee49273bbd1c34af6f2e01c8b452ae244362e5a435232dd892170647", 0xad, 0x7}, {&(0x7f0000000500)="ad04b43c7388bf033660de5a1a7474a1fa37d83ddd383f23ade8d80e714a51bd4a0f8b4cb950bd5015ba12c3806f460cecc46c032fb739aba4d903e9fa36b19814bc6190def16c30866644cdebd16fd621d0faf416ac4aa12ac8de8f3405ce75e5521174a663f652b8aecdd8650b1323cf245158bf3ed729df0f31e018dbea1a8a1d4bcdf662e7bc978b8694e13f4a4e6c8ccc735ceb49ab8557ca0bd344bd2c89f86e0fff53cb15c73410117c8605005a003694", 0xb4, 0x80}, {&(0x7f0000000680), 0x0, 0x10000}, {&(0x7f0000000600)="1e870daaf2497ad464779f74fd8e19ec5216f5360c4db83c626cbd0f95fee32d9a0a2e634c75b1816685279eeb8b53a94942611762e826dee0a1c24f57ecbf6cd7ce9cc3261cac5d25b17521fe929692", 0x50, 0x8}, {&(0x7f0000000900)="f184e4ab3b66959d9c8b2b720127befd90fe311ee2fa555e947f07650625cc8b94932dec4077b5870b6be1e26e2fecd3a993de2a8feb067b5700676017c58581653e4ab7ac437d9efdfac0e64fe2922512568af176dba1c7ba84cbe3851823d97f82ff2657b2b4a4bece2f36147a0b6f8f82c0d98b9ce8938361d45f60144e8db843bcc365771b0b67076a1670043fb8fe", 0x91, 0x7}, {&(0x7f0000000740)="40859cef35129dcf457b3e87b22e98f71684813a0f099c5a09ad627424de55d35bd2bfeb2b0148c8da8def9f10b9", 0x2e, 0xffffffffffffeec7}, {&(0x7f0000000780)="eddf2f8f2df4263a5e", 0x9, 0x5547}, {&(0x7f00000007c0)="82804405b21bf1ca72ea670c875affe91a8c51d9c64abf887b15d74b467944970ebc", 0x22, 0x100000000}], 0x20004, &(0x7f0000000c80)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d, 0x2d, 0x1a, 0x6d, 0x67]}}, {@gid={'gid', 0x3d, 0xee00}}, {@huge_advise}, {@nr_blocks}], [{@uid_gt}, {@fowner_eq}]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000009c0))
r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0)
ioctl(r3, 0x4b, &(0x7f0000000bc0)="f2850b9985f64898921f8c6fc4935ae16bde6a730939fe74412028967d3a1c7bdaffb4e83ba42dff1ffd8f648dbd598ec755093133f5ff39458773a7a897cb7b7f25923e4abd0d77a8e3684b63d80aedd6cf3f63906cf0217745243780bff2d5b7ba186a4a72c0e2871229fa7c6b83163f5c103b2c87ef5208b57d93e54d3f8e81c03b0193fb130751d75bbb5a1f5e3e08af942e1b")

04:45:39 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:45:39 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1532.028058] loop2: detected capacity change from 0 to 40
04:45:39 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x80, 0x1)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:45:39 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x3, 0x0, &(0x7f0000001100))

04:45:39 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), 0x4)

04:45:39 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:45:39 executing program 1:
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000), 0x4)

04:45:39 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x6, 0x0, &(0x7f0000001100))

04:45:39 executing program 6:
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000140)="14da250e5837259a6a47cb9107ff70f6ed2d118a34430d000d6272583262e9d925a3938c6c8a0b05b6233001297ef1e2b10fa5b54fbf3f76ef74d096edc149d1028823694373bdcf3554b49134f75054a0aedcb2a3e80b367d05d49628b554ab8b1d5c8941e952ce3120163d7833f5cad789e8341829329f926dbe6be59a7f8d9d8e4b564e4c243ec00b2ad441e3f94722e3bead72ceca50719489931e8c", 0x9e}, {&(0x7f0000000200)="50ec44b27bd54945f567a43ee4640189d9822d8a7a3953fdeb4c56b41271695608cfa6bd402d120dec88b12ab5a41513843e3ebe8a763ff9d2ddd39368ef5096876f85335e790c8c4ac3f982b9a576f1091fa9005f160695229ab8960ab92dc42dde6d36d13cdc265e2ca4a72c572e01a45ba36341eae9a109d2b244ba98169c95c89d47532d105b488091fb34804a65c72a62365bb2fcceb43a9957ec074fd6f0650bce1674c3b21a5c77d69c896d93ed", 0xb1}, {&(0x7f0000000080)="c3d77b480a2a8dc4043661dd4c3396c3ab2a11a9456ecf6e06d682ba68ebce3b3001fda8dddef5eff9fd1fea1ee89fc48d4b84cedc4504cfc23415fe0de1ce758e45f3c1299f7d1207847b", 0x4b}, {&(0x7f00000002c0)="3dcf3f1d78c89ba07033a1692fa39f7cb0a3eae60a74e9151a5947774c8c54f1fea7d2a64370f81c09fa0e2b6831229473010e4c989bbc68f5449e9c0dd53f09dd967910a2e5ca04ee2f6b68caf6f6db35f9461dd0097bdb2027532d876c331e9fbcebe61f006354b0cc7b3fbc7b93bd88b7", 0x72}, {&(0x7f0000000340)="00dde41ba0b3f6cc3d078ee4fd3dc0b36426ca282da6334fc5b4428ca6e1b5d60972e7b87222502bf280b33b12a87b94c23591329bc43b8511769a73ad7209486c9b672627143b9e47b9fbf70d715e42c2149c328c34fa248fefd767dad0ac38741c9da13258dffb264df457594635b720d8df0774e1dcae2f90d4375e03043af89e7232c5199336", 0x88}, {&(0x7f0000000400)="2542335d7a4875bbd375625b242a07601625db759a7d9d32c926874df54dff29be9af5b9172a8b278e4e4e114ed675880927d97138b02f6402a4799bc9f67d79e2bf254c0ca3c690a9d93ee6bef193ec7bac60c981376f5d237b34451a1be23b8db1cf9062c6702019048b54b761ef61a91af53ee40a4d", 0x77}, {&(0x7f0000000480)="3ee596c54a3a7bc9e51d1774898f0ed144c909517b464c6f747db98541f95d901df6cad7353976ea20ed4220cc6b6971179841341129b49a29af11b65ced283c54f1ffb2efe3d144e94e2fa799400e537e423c42a35d5f39f85a004c95c6e0ed254a97b9588c1fbb07e10880f4ad99d5b3a245c351b02bb20b43046c5a7236f37b30b29e959ca24dd2c6b654551648cf4f8627243df8c3e919aea68573037fd7acc439715e9d23c24fed1fdfec6ca0cffc0a075d38ce64ef9cf262f5088117884b6d", 0xc2}], 0x7, 0x873, 0xfffffffb, 0x18)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 0x78}, 0xe)

04:45:39 executing program 1:
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000), 0x4)

04:45:39 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1532.211582] kworker/u4:11: attempt to access beyond end of device
[ 1532.211582] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1532.213666] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:45:39 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

[ 1532.360656] loop2: detected capacity change from 0 to 40
[ 1532.469540] kworker/u4:2: attempt to access beyond end of device
[ 1532.469540] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1532.471187] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:45:53 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x3}}, './file0\x00'})
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000140)=0x1)

04:45:53 executing program 1:
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000), 0x4)

04:45:53 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:45:53 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000))

04:45:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:45:53 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:45:53 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x6, 0x0, &(0x7f0000001100))

04:45:53 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x3, 0x7ff}}, './file0\x00'})
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x1}, 0xe)

04:45:53 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), 0x4)

[ 1546.269327] loop2: detected capacity change from 0 to 40
04:45:53 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), 0x4)

04:45:53 executing program 6:
setresuid(0x0, 0xee00, 0x0)
setfsuid(0x0)
setresuid(0x0, 0xee01, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)
setreuid(r1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1000, 0x1}, 0xe)

04:45:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1546.339560] kworker/u4:3: attempt to access beyond end of device
[ 1546.339560] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1546.341384] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1546.404154] loop2: detected capacity change from 0 to 40
04:45:54 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x823, &(0x7f0000000040)=0x2)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:45:54 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8600, 0x94)
r2 = inotify_init()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r2, {0xffffffffffffffff}}, './file0\x00'})
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0xf602, @any, 0x3, 0x2}, 0xe)
fcntl$dupfd(r0, 0x0, r2)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:45:54 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x6, 0x0, &(0x7f0000001100))

04:45:54 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), 0x4)

[ 1546.526906] kworker/u4:3: attempt to access beyond end of device
[ 1546.526906] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1546.528690] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:45:54 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:45:54 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x6, 0x0, &(0x7f0000001100))

04:46:07 executing program 4:
clock_settime(0x5, &(0x7f0000000000)={0x0, 0x989680})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x6, @any, 0xfffd, 0x2}, 0xe)

04:46:07 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)

04:46:07 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x1, 0x20})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>r0, @ANYBLOB="01000000020000002e2f66696c653000512a582f20ef439cd9e7968d5cf9613c00bc4579f8c3120df2d4df0d5edaf9f2e3af1e22b705fd5d8bad5e991ae12e437f6b0e5b285626ed6701774fe2e90a1a415ccbab3df8ae193fba5a7c4825678248b827e2e713e2a3d09f69f1674a5657741acc483d304883db016abee78f0f3f"])
kcmp(0x0, 0xffffffffffffffff, 0xe, r1, r2)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)
pwrite64(r3, &(0x7f0000000000)="348225ffdcf64572d544be1d6a1d87a374bf907a14c0fcbbae7a", 0x1a, 0x4)

04:46:07 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000), 0x4)

04:46:07 executing program 3:
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x6, 0x0, &(0x7f0000001100))

04:46:07 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:46:07 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:46:07 executing program 6:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4800)
fsmount(r1, 0x0, 0xf5)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x9, 0x1f, 0x1, 0x7, 0x0, 0x40, 0x8002, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1000, 0x2, 0xffff, 0x8, 0x80000001, 0x800, 0xb1e4, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x3)

04:46:07 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000), 0x4)

[ 1560.044503] loop2: detected capacity change from 0 to 40
04:46:07 executing program 3:
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x6, 0x0, &(0x7f0000001100))

04:46:07 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8, @any, 0x300, 0x1}, 0xe)

04:46:07 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none}, 0xe)

[ 1560.139945] syz-executor.2: attempt to access beyond end of device
[ 1560.139945] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:46:07 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f00000000c0)=0xffffffffffffff7f)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0)

04:46:07 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000), 0x4)

04:46:07 executing program 3:
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x6, 0x0, &(0x7f0000001100))

[ 1560.222185] kworker/u4:2: attempt to access beyond end of device
[ 1560.222185] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1560.223810] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1560.225540] kworker/u4:2: attempt to access beyond end of device
[ 1560.225540] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1560.227325] kworker/u4:2: attempt to access beyond end of device
[ 1560.227325] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1560.229002] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:46:07 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:46:07 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000180)=0x4)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100)=0x94, 0x1)
connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0xb0}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000040)={r0})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x115000, 0x0)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x2000}, 0x4)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
connect$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x7, @none, 0x5}, 0xd)

[ 1560.312374] loop2: detected capacity change from 0 to 40
[ 1560.355983] syz-executor.2: attempt to access beyond end of device
[ 1560.355983] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
[ 1560.387159] kworker/u4:1: attempt to access beyond end of device
[ 1560.387159] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1560.387972] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1560.388616] kworker/u4:1: attempt to access beyond end of device
[ 1560.388616] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1560.389472] kworker/u4:1: attempt to access beyond end of device
[ 1560.389472] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1560.390262] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:46:08 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)

04:46:08 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x6, 0x0, &(0x7f0000001100))

04:46:08 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @none, 0x3, 0x2}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:46:08 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = accept4(r0, &(0x7f0000000040)=@xdp, &(0x7f00000000c0)=0x80, 0x80000)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2)

04:46:08 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)

04:46:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:46:08 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x6, 0x0, &(0x7f0000001100))

04:46:08 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xc320}}, './file0\x00'})
ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)=ANY=[@ANYBLOB="0009913168143e1e3700000000000000ff0f0000000000000400000000000000"])
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x9, 0x9, 0x5, 0x1f, 0x0, 0x5, 0x2032, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x0, 0x7, 0x2, 0x0, 0x7, 0x807ff, 0x0, 0x0, 0x9, 0x0, 0x5}, 0x0, 0xc, r1, 0x3)

04:46:08 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1561.084250] loop2: detected capacity change from 0 to 40
[ 1561.140324] kworker/u4:2: attempt to access beyond end of device
[ 1561.140324] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1561.141317] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1562.057147] Bluetooth: hci5: command 0x0405 tx timeout
04:46:22 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:46:22 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
close(r0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
signalfd4(r1, &(0x7f0000000040)={[0x100]}, 0x8, 0x80800)

04:46:22 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB='\x00\x00\f\t\x00\x00\x00\x00\x00\x000\x00'])
getpeername(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff}}, &(0x7f0000000100)=0x80)
sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x008\x00', @ANYRES32=r3, @ANYBLOB="e82984dbfc2b6241ada770e67f0ec6597c9a00003ccd9a9b35562b750d3e14c0779da7bf714b443b046d6f3f88f74bdeaa6fc7a3bf2145bf021237892c55716eb1"], 0x3b8}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'sit0\x00', <r5=>0x0, 0x29, 0x3, 0x6, 0x3f, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x21}, 0x1, 0x10, 0xfffffff8, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6tnl0\x00', <r6=>0x0, 0x0, 0x8, 0x1f, 0x7, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7820, 0x10, 0x2, 0x4}})
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000e00)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000f00)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000f40)={0xaa8, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x634c}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0xf}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xabc}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x1, 0x9, 0x4}, {0x8001, 0xca, 0x77, 0xf9}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x7f, 0x8, 0x6}, {0x9dd7, 0x7, 0x0, 0x3}, {0x6, 0x1, 0x0, 0x7a}, {0x8001, 0x7, 0x8, 0x41}, {0x5, 0x4, 0x8, 0x77}, {0x58e4, 0x81, 0x40, 0xffffffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x46}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4062}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x8, 0x9, 0x8}, {0x4, 0x1, 0x75, 0x911ae20}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x1f, 0x0, 0x3f}, {0x1, 0x5, 0xff, 0x4}, {0x7, 0x7, 0xe2, 0xdf}, {0x0, 0x75, 0x7, 0x2000004}, {0x8000, 0x7f, 0x8, 0x7f}, {0x7, 0x40, 0x3, 0x81}, {0x1ff, 0x1, 0x2, 0x9}, {0xf000, 0x60, 0x7, 0xfffffff8}, {0x6, 0x40, 0x2, 0x400}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}]}, 0xaa8}, 0x1, 0x0, 0x0, 0x884}, 0x20000001)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f0000000100), 0x1)
sendto$unix(r1, &(0x7f0000000200)='\f', 0x1, 0x80, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
getsockopt$IP_SET_OP_GET_BYINDEX(r8, 0x1, 0x53, &(0x7f00000005c0)={0x7, 0x7, 0x1}, &(0x7f0000000600)=0x28)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r9, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0xd0)
dup2(r1, r4)

04:46:22 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x6, 0x0, &(0x7f0000001100))

04:46:22 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'netdevsim0\x00', {0x3}, 0x1f})

04:46:22 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)

04:46:22 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:46:22 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00')
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000040))
r2 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x12000, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x88401, 0x1a0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0)
sendfile(r3, r4, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r6=>r3, @in_args={0x4}}, './file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000400)={0x1f, 0x1, {0x2, 0x3, 0x10000, 0x1, 0x6}, 0x7})
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xc8201, 0x0)
fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000380)=0x4)
fcntl$setstatus(r5, 0x4, 0xc00)
r8 = socket$inet_icmp(0x2, 0x2, 0x1)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000480)={0xc8002010})

[ 1574.613363] loop2: detected capacity change from 0 to 40
[ 1574.686058] kworker/u4:2: attempt to access beyond end of device
[ 1574.686058] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1574.687871] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:46:22 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x6, 0x0, &(0x7f0000001100))

04:46:22 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1574.753621] loop2: detected capacity change from 0 to 40
04:46:22 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3f, 0x59, 0x40, 0xcd, 0x0, 0x7fff, 0x10, 0x11, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7e, 0x0, @perf_config_ext={0x0, 0x1}, 0x500, 0xffffffffffffff81, 0x2, 0x0, 0x2, 0x8, 0x8000, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x8c, 0x40, 0x0, 0xfffffffffffffe01, 0x3e, 0x7}, {0xfffffffc, 0xd7d9, 0x100, 0x80000000, 0x8000, 0x39fc}], ['\x00', '\x00']})

04:46:22 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:46:22 executing program 6:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100)=0x4, 0x1)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:46:22 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x6, 0x0, &(0x7f0000001100))

04:46:22 executing program 5:
mq_unlink(&(0x7f0000000000)='\x00')
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
pipe2$9p(&(0x7f0000000040), 0xfa63b9cc7014933b)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000080)}, 0x0)

[ 1574.875715] kworker/u4:3: attempt to access beyond end of device
[ 1574.875715] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1574.877377] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:46:22 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1574.936970] loop2: detected capacity change from 0 to 40
[ 1575.182404] kworker/u4:0: attempt to access beyond end of device
[ 1575.182404] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1575.184156] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1577.830283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1577.833472] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1577.836897] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1577.840565] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1577.842057] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1577.843517] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1579.913206] Bluetooth: hci3: command 0x0409 tx timeout
[ 1581.961151] Bluetooth: hci3: command 0x041b tx timeout
[ 1584.009133] Bluetooth: hci3: command 0x040f tx timeout
[ 1586.057168] Bluetooth: hci3: command 0x0419 tx timeout
[ 1594.446698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1594.448203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1594.451422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1594.482645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1594.483898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1594.486501] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
04:46:55 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x6, 0x0, &(0x7f0000001100))

[ 1608.287999] loop2: detected capacity change from 0 to 40
04:46:55 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @any, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'ip6gretap0\x00', {0x2, 0x0, @private}})

04:46:55 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:46:55 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:46:55 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = memfd_secret(0x80000)
bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x20, @none, 0x1, 0x2}, 0xe)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x7fff, @any, 0x1f}, 0xe)

04:46:55 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040)={0x4, "9e8c43"}, 0x6)

04:46:55 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:46:55 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000400))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:46:56 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/75, 0x4b}, {&(0x7f0000000080)=""/218, 0xda}, {&(0x7f0000000180)=""/27, 0x1b}, {0xfffffffffffffffc}, {&(0x7f00000001c0)=""/130, 0x82}], 0x5, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r0=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000480)=""/181, 0xb5}, {&(0x7f0000000540)}, {&(0x7f0000001140)=""/4096, 0x1000}], 0x3, &(0x7f00000005c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000000700)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000780)=""/16, 0x10}], 0x1, &(0x7f0000000800)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/85, 0x55}, {&(0x7f0000000940)=""/17, 0x11}, {&(0x7f0000000980)=""/218, 0xda}], 0x3, &(0x7f0000000ac0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000c00)=""/173, 0xad}, {&(0x7f0000000cc0)=""/48, 0x30}, {&(0x7f0000000d00)=""/153, 0x99}, {&(0x7f0000000dc0)=""/88, 0x58}, {&(0x7f0000000e40)=""/70, 0x46}], 0x5, &(0x7f0000000f40)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}], 0x5, 0x40000020, &(0x7f0000001040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001080))

04:46:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1608.360011] kworker/u4:2: attempt to access beyond end of device
[ 1608.360011] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1608.361092] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1608.437761] loop2: detected capacity change from 0 to 40
[ 1608.529808] kworker/u4:2: attempt to access beyond end of device
[ 1608.529808] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1608.530632] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1610.313129] Bluetooth: hci3: command 0x0405 tx timeout
04:47:11 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
poll(&(0x7f0000000000)=[{r0, 0x6001}], 0x1, 0x2)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:47:11 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:47:11 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:47:11 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x6, 0x0, 0x0)

04:47:11 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:47:11 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
write$binfmt_aout(r1, &(0x7f0000000200)={{0x107, 0x7, 0x0, 0x326, 0x86, 0x6, 0x3cc, 0x5}, "f4e70faa0eaf5d4675979a5b48aaefcf8a9602ef8df5a6002682fce18649e260d7b440da9940b2b4502e59c66a4eb08c1083f3601ed4eaa87d2afbdfcffd5594089464", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x963)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e0, 0x140)
ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000001c0)={0x0, r0, 0x10005, 0xdfa9, 0x8, 0x1d8})
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {r5, 0xee00}}, './file0\x00'})
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe)

04:47:11 executing program 5:
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x3, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x80}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffff9, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffc4c}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7e000000}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0xfffffffc}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7fffffff}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x12}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000028}, 0x48004)
ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000080))
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x50, 0x4)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:47:11 executing program 7:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x70, 0xffffffffffffffff, 0x0)
r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="3498391ebcddc79926b06091ca6e942e51854b5a5591a4d62aeb19c3b3fd6781d3413da6eb0507db3003a13b04cf67b3d035ddb314cfd1094c23b33c75811b2fd5da83fb15792972884276adf832c10c550e1644c0ee03335dd219d9c6003b9a262c84e0d6ed7f9c6515cc5cee86e6212cea62581a49c8729f1c179b3ad334629ea423c79e45e84a457e8f54519edac8199aae82f6776828fc3156ace4e42c", 0x9f, 0x2}], 0x1004, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6e6f7e756d740c8d5cf152f279f8b703979e0261006b66736861743d5d267b2c7365636c6162656c2c6d63736b3d4d41595f524541442c00fbb6a9ed1e2c3901678fad61880a7063e03a24ae46bd4f9680b5ac5f24707c7c08d8a78d86a35fea750377722243b3c056f0b5dea8b735eeec5b89ad62c7c6074bb7847ddfdb86621525"])
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r2, 0x47, 0x0, 0x7e, 0x1, 0x1}, 0x5)

[ 1624.297036] loop2: detected capacity change from 0 to 40
[ 1624.390808] syz-executor.2: attempt to access beyond end of device
[ 1624.390808] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:47:12 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x6, 0x0, 0x0)

04:47:12 executing program 6:
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000000))

04:47:12 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6e, @none, 0x2}, 0xe)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl(r1, 0xfff, &(0x7f0000000040)="7bdd9ff8b46c1391f787583f758579762c3c4eb97443b94719ae526b78bd20fb9a4f5ff8f583152ed06da8a1ff37449292e0a26d197f448b4d67fb00c89a02e348a2657255f05003983473a228e66a13cb6dd6b4bc2644")
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

[ 1624.533548] kworker/u4:2: attempt to access beyond end of device
[ 1624.533548] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1624.535104] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1624.540238] kworker/u4:2: attempt to access beyond end of device
[ 1624.540238] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1624.544416] kworker/u4:2: attempt to access beyond end of device
[ 1624.544416] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
04:47:12 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1624.545964] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:47:12 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x6, 0x0, 0x0)

04:47:12 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
signalfd4(r1, &(0x7f00000000c0)={[0x6]}, 0x8, 0x80800)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xa8080, 0x0)
setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000040), 0x10)

04:47:12 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
socketpair(0x2c, 0x80000, 0x69db, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
shutdown(r1, 0x0)

04:47:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:47:12 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r2 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x1, 0x6, 0x9, 0x1000, 0xfff})

04:47:12 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffffe, 0x2000401}}, './file0\x00'})
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1f, 0x1}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:47:12 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_setup(0x46ac, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x5, 0x200, 0x0, 0x7, 0x0, 0x1}, 0x3f)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:47:26 executing program 1:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x70, 0xffffffffffffffff, 0x0)
r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="3498391ebcddc79926b06091ca6e942e51854b5a5591a4d62aeb19c3b3fd6781d3413da6eb0507db3003a13b04cf67b3d035ddb314cfd1094c23b33c75811b2fd5da83fb15792972884276adf832c10c550e1644c0ee03335dd219d9c6003b9a262c84e0d6ed7f9c6515cc5cee86e6212cea62581a49c8729f1c179b3ad334629ea423c79e45e84a457e8f54519edac8199aae82f6776828fc3156ace4e42c", 0x9f, 0x2}], 0x1004, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6e6f7e756d740c8d5cf152f279f8b703979e0261006b66736861743d5d267b2c7365636c6162656c2c6d63736b3d4d41595f524541442c00fbb6a9ed1e2c3901678fad61880a7063e03a24ae46bd4f9680b5ac5f24707c7c08d8a78d86a35fea750377722243b3c056f0b5dea8b735eeec5b89ad62c7c6074bb7847ddfdb86621525"])
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r2, 0x47, 0x0, 0x7e, 0x1, 0x1}, 0x5)

[ 1639.349046] random: crng reseeded on system resumption
[ 1639.355907] random: crng reseeded on system resumption
04:47:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:47:26 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x81, 0x2}, 0xe)

04:47:26 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB='\x00\x00\f\t\x00\x00\x00\x00\x00\x000\x00'])
getpeername(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff}}, &(0x7f0000000100)=0x80)
sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x008\x00', @ANYRES32=r3, @ANYBLOB="e82984dbfc2b6241ada770e67f0ec6597c9a00003ccd9a9b35562b750d3e14c0779da7bf714b443b046d6f3f88f74bdeaa6fc7a3bf2145bf021237892c55716eb1"], 0x3b8}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'sit0\x00', <r5=>0x0, 0x29, 0x3, 0x6, 0x3f, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x21}, 0x1, 0x10, 0xfffffff8, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6tnl0\x00', <r6=>0x0, 0x0, 0x8, 0x1f, 0x7, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7820, 0x10, 0x2, 0x4}})
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000e00)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000f00)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000f40)={0xaa8, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x634c}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0xf}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xabc}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x1, 0x9, 0x4}, {0x8001, 0xca, 0x77, 0xf9}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x7f, 0x8, 0x6}, {0x9dd7, 0x7, 0x0, 0x3}, {0x6, 0x1, 0x0, 0x7a}, {0x8001, 0x7, 0x8, 0x41}, {0x5, 0x4, 0x8, 0x77}, {0x58e4, 0x81, 0x40, 0xffffffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x46}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4062}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x8, 0x9, 0x8}, {0x4, 0x1, 0x75, 0x911ae20}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x1f, 0x0, 0x3f}, {0x1, 0x5, 0xff, 0x4}, {0x7, 0x7, 0xe2, 0xdf}, {0x0, 0x75, 0x7, 0x2000004}, {0x8000, 0x7f, 0x8, 0x7f}, {0x7, 0x40, 0x3, 0x81}, {0x1ff, 0x1, 0x2, 0x9}, {0xf000, 0x60, 0x7, 0xfffffff8}, {0x6, 0x40, 0x2, 0x400}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}]}, 0xaa8}, 0x1, 0x0, 0x0, 0x884}, 0x20000001)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f0000000100), 0x1)
sendto$unix(r1, &(0x7f0000000200)='\f', 0x1, 0x80, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
getsockopt$IP_SET_OP_GET_BYINDEX(r8, 0x1, 0x53, &(0x7f00000005c0)={0x7, 0x7, 0x1}, &(0x7f0000000600)=0x28)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r9, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0xd0)
dup2(r1, r4)

04:47:26 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000080))
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20c01, 0x0)
sendfile(r0, r1, &(0x7f0000000040)=0x4, 0x2)

04:47:27 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'bond_slave_0\x00', {'veth0_to_batadv\x00'}, 0x401})

04:47:27 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
r2 = dup(r1)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, 0x0, &(0x7f0000000040))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000080)={0x613f, 0x2, {0x1, 0x3, 0x8, 0x2, 0xfffffc01}, 0x5})

04:47:27 executing program 5:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, &(0x7f0000001100))
r3 = dup2(r2, r0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001fc0)='/proc/meminfo\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x10000027f)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r8, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8, 0x3, r9}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4000)
sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8000000, 0x78}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "03b44b6dc5"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000840}, 0x10)

[ 1639.415024] loop2: detected capacity change from 0 to 40
04:47:27 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:47:27 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000))

[ 1639.496549] syz-executor.2: attempt to access beyond end of device
[ 1639.496549] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:47:27 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x76, 0x1)

[ 1639.544910] kworker/u4:10: attempt to access beyond end of device
[ 1639.544910] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1639.546556] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1639.548414] kworker/u4:10: attempt to access beyond end of device
[ 1639.548414] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1639.552646] kworker/u4:10: attempt to access beyond end of device
[ 1639.552646] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1639.554399] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:47:27 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000000))

04:47:27 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1639.613550] loop2: detected capacity change from 0 to 40
04:47:27 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x6, @none, 0x2}, 0xe)
r1 = dup(r0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000000))
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0xd9}, 0xffffffff}, {0xa, 0x4e24, 0x4, @private1, 0x5}, 0x3, [0x3, 0x7, 0x1ff, 0x78, 0x3, 0x7, 0x0, 0x1]}, 0x5c)

04:47:27 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x7ff, 0x5, 0x101, 0x0, 0x54, 0x8b}, 0xc)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3, @any, 0x5, 0x1}, 0xe)

[ 1639.698904] syz-executor.2: attempt to access beyond end of device
[ 1639.698904] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:47:27 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000))

[ 1639.756552] kworker/u4:3: attempt to access beyond end of device
[ 1639.756552] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1639.758243] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1639.761962] kworker/u4:3: attempt to access beyond end of device
[ 1639.761962] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1639.766620] kworker/u4:3: attempt to access beyond end of device
[ 1639.766620] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1639.768403] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:47:27 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xc7f}}, './file0\x00'})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
signalfd4(r2, &(0x7f0000000080)={[0x7]}, 0x8, 0x1c0800)

04:47:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:47:41 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB='\x00\x00\f\t\x00\x00\x00\x00\x00\x000\x00'])
getpeername(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff}}, &(0x7f0000000100)=0x80)
sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x008\x00', @ANYRES32=r3, @ANYBLOB="e82984dbfc2b6241ada770e67f0ec6597c9a00003ccd9a9b35562b750d3e14c0779da7bf714b443b046d6f3f88f74bdeaa6fc7a3bf2145bf021237892c55716eb1"], 0x3b8}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'sit0\x00', <r5=>0x0, 0x29, 0x3, 0x6, 0x3f, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x21}, 0x1, 0x10, 0xfffffff8, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6tnl0\x00', <r6=>0x0, 0x0, 0x8, 0x1f, 0x7, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7820, 0x10, 0x2, 0x4}})
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000e00)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000f00)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000f40)={0xaa8, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x634c}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0xf}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xabc}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x1, 0x9, 0x4}, {0x8001, 0xca, 0x77, 0xf9}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x7f, 0x8, 0x6}, {0x9dd7, 0x7, 0x0, 0x3}, {0x6, 0x1, 0x0, 0x7a}, {0x8001, 0x7, 0x8, 0x41}, {0x5, 0x4, 0x8, 0x77}, {0x58e4, 0x81, 0x40, 0xffffffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x46}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4062}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x8, 0x9, 0x8}, {0x4, 0x1, 0x75, 0x911ae20}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x1f, 0x0, 0x3f}, {0x1, 0x5, 0xff, 0x4}, {0x7, 0x7, 0xe2, 0xdf}, {0x0, 0x75, 0x7, 0x2000004}, {0x8000, 0x7f, 0x8, 0x7f}, {0x7, 0x40, 0x3, 0x81}, {0x1ff, 0x1, 0x2, 0x9}, {0xf000, 0x60, 0x7, 0xfffffff8}, {0x6, 0x40, 0x2, 0x400}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}]}, 0xaa8}, 0x1, 0x0, 0x0, 0x884}, 0x20000001)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f0000000100), 0x1)
sendto$unix(r1, &(0x7f0000000200)='\f', 0x1, 0x80, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
getsockopt$IP_SET_OP_GET_BYINDEX(r8, 0x1, 0x53, &(0x7f00000005c0)={0x7, 0x7, 0x1}, &(0x7f0000000600)=0x28)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r9, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0xd0)
dup2(r1, r4)

04:47:41 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:47:41 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x2}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000040)={'ip_vti0\x00', {0x2, 0x0, @dev}})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:47:41 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x121001, 0x4)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:47:41 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:47:41 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

04:47:41 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = accept4(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000080)=0x80, 0x53aed17df1e58eec)
getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

[ 1654.262933] loop2: detected capacity change from 0 to 40
04:47:41 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @none, 0x2}, 0xe)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x14, 0x1, {0x1}}, 0xf75)

04:47:42 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

[ 1654.373572] syz-executor.2: attempt to access beyond end of device
[ 1654.373572] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
[ 1654.454404] kworker/u4:8: attempt to access beyond end of device
[ 1654.454404] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1654.455455] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1654.456289] kworker/u4:8: attempt to access beyond end of device
[ 1654.456289] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1654.457660] kworker/u4:8: attempt to access beyond end of device
[ 1654.457660] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1654.458769] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:47:55 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:47:55 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:47:55 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000400)={{0x2, 0x0, 0x0, 0x0, r2, 0x1, 0x2}, 0x2, 0xab9c, 0x0, 0x0, 0x0, 0x0, 0x1ff})
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)
r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000680)=0x14)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000080)="1fb0be56653ed37fef26f5ce3d64ab22b0ed24794fb082c7b3f4649f1e22efcb32c1506aa6bffc9166d6d847be12ab7340afd91b367ed69d0281452860dda38c87979aa36ae804d049664c203bd4cce05c9c9d5ce51d9fa7045db294208b9b1bff1bb476049af371035bc28867214d3cf40f0866c5407e3e8545e1726ab907cabab7ffb3898747a344c90e521bab05b3a56c7d89a817370f33ee1b503258f9ad9fa292db298f6570d0b699e155ce6e9b2d4b1c705ae7e634084722", 0xbb}, {&(0x7f0000000140)="b3b19dbf91f4968d24136c61d42ddb54afb7fc0f349254b546eeaca56b5afa8a5ddac40c8676c28a26dd30ea6680e8c4278cfbee5975e037c2101c4ec09d5b401fe3e3100c22a02c324c1ce5", 0x4c}, {&(0x7f00000001c0)="6283b7c1f482e2208580bdc056e9aeec885160fb36cf5b8d752a992b5dcd7aea6ca72e54e540fd414b970d3b7d523eac4d09e5255ed373bd518f6829aa90333b240b38dd5f18e5b1616e5deee603a52f94eab59ee620605e0af384f278296f780e6c3c6f07f46c26c3f0b3d6d1ba78c23885327501ed98ba0c5a17be0449581e14eaddb874649b6bf31a98526a83badfaa79dfc3281458a5f742fd66bcb3eb20a3111623e0d92930b9089aa4afc920880d1500a9880d1d146f05db1c9d0e30fb38f4bbc5f991cd7a46e8ea1efcaa6a028544ad17fef30ba9432a3270923541f4371d2fc25db842ac76", 0xe9}, {&(0x7f00000002c0)="6555a1b2442c0ef98fea0989e4a5918030b9e2ae87c86166950b48fddab8e1de9ab4cca94ce54a0e8b2ba7e11b6f43e4d7094652f8f01e1293455d36e034bbcd9554515ef5389bde70c60600a5c9d37967a46500a12070e78bdd4726fc88354a90f70d659adf2ae89bb57d2484e05e83e4b44109dbb69aa2c2606f11e1d2a7785617479268d99ffebf719a2b2255578aae19798a6eacc5e24e1d231690aa5d99032ca936c2a171755218cf846fc463fe9f8abf8eac8bd57c6085f976459f465a1951d376bbbf1131d857ddc4232a0bf567373141d5490910b1eed25e92ad8b20fd1079ea0302ae73c4ac1a54c2e92db4", 0xf0}, {&(0x7f00000003c0)="150839ea1a95889c22e0535e218ce26899ede5bdd25438e1d111e6fe2e8a46aa6f20df5a5a15ff44f16f18aed9a26f8d2e62386621f88aa1d621ee2443b2c78f215904e25a421d805c280a1ce94f3203d0b0d2b52a990907e85dbd64a534163c158681348937e5a73ec3b5e5223a0400a51f840481f4ad7e745849a41b6269e06fe852a11f6a7ed602a442a0b46d92a1c95b3bb2d1721dede53c7afd0546d101b439972e853ebdb2e6c23090d4ddecc5c69354d224b5c2db75a6f9d308293768cd41fb7fd18e", 0xc6}, {&(0x7f00000004c0)="f2ccb24a0244ba54786129bc9cc1e40369c992be8388c9e1e3f82e1826447da1b4d700ddb0dffa69c708bf0bfe4aa9df", 0x30}, {&(0x7f0000000500)="8f69562f8dd4e1ba23d760170e6f5b3c9837e62f708ee8fc132eed2e9465ddba1ad477020cab04099dac7e699bdaac8baef8aacfb8852189e2673214b4f64a344ce7d36bc5231efd5fb2c505e7bf0c0c21ee1cca1565061ce14e4ec7c4875b7bae1e90273bede09512e3db", 0x6b}], 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000065004b46477d6c344bef965e5cba7d0ae6fdba5647a8969a1e1ac735f436da72cb03c3727ce09356642b094e9f22a23857c62a1eed3cc30aa2e29a247a6d992956373a263ebabe1f6f183d588b97cfd58ff00962fbb36dbfea1c68443993b70b722fcee40dc880453885e7484daeea6298850afa74dfe8a39ad686c36737b84e18d537caf8c000baae83a2ea8b893c3", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5], 0x40, 0x840}, 0x4910)
symlinkat(&(0x7f00000006c0)='./file0\x00', r3, &(0x7f0000000740)='./file0/file0\x00')
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:47:55 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB='\x00\x00\f\t\x00\x00\x00\x00\x00\x000\x00'])
getpeername(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff}}, &(0x7f0000000100)=0x80)
sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x008\x00', @ANYRES32=r3, @ANYBLOB="e82984dbfc2b6241ada770e67f0ec6597c9a00003ccd9a9b35562b750d3e14c0779da7bf714b443b046d6f3f88f74bdeaa6fc7a3bf2145bf021237892c55716eb1"], 0x3b8}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'sit0\x00', <r5=>0x0, 0x29, 0x3, 0x6, 0x3f, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x21}, 0x1, 0x10, 0xfffffff8, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6tnl0\x00', <r6=>0x0, 0x0, 0x8, 0x1f, 0x7, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7820, 0x10, 0x2, 0x4}})
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000e00)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000f00)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000f40)={0xaa8, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x634c}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0xf}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xabc}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x1, 0x9, 0x4}, {0x8001, 0xca, 0x77, 0xf9}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x7f, 0x8, 0x6}, {0x9dd7, 0x7, 0x0, 0x3}, {0x6, 0x1, 0x0, 0x7a}, {0x8001, 0x7, 0x8, 0x41}, {0x5, 0x4, 0x8, 0x77}, {0x58e4, 0x81, 0x40, 0xffffffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x46}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4062}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x8, 0x9, 0x8}, {0x4, 0x1, 0x75, 0x911ae20}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x1f, 0x0, 0x3f}, {0x1, 0x5, 0xff, 0x4}, {0x7, 0x7, 0xe2, 0xdf}, {0x0, 0x75, 0x7, 0x2000004}, {0x8000, 0x7f, 0x8, 0x7f}, {0x7, 0x40, 0x3, 0x81}, {0x1ff, 0x1, 0x2, 0x9}, {0xf000, 0x60, 0x7, 0xfffffff8}, {0x6, 0x40, 0x2, 0x400}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}]}, 0xaa8}, 0x1, 0x0, 0x0, 0x884}, 0x20000001)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f0000000100), 0x1)
sendto$unix(r1, &(0x7f0000000200)='\f', 0x1, 0x80, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
getsockopt$IP_SET_OP_GET_BYINDEX(r8, 0x1, 0x53, &(0x7f00000005c0)={0x7, 0x7, 0x1}, &(0x7f0000000600)=0x28)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r9, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0xd0)
dup2(r1, r4)

04:47:55 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))

04:47:55 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:47:55 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x205, @any, 0xfffe}, 0xe)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200400, 0x30)

04:47:55 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x4e, &(0x7f0000000040)=0x4)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x329400, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x11, r2, 0x0)
syz_io_uring_setup(0x46ac, &(0x7f0000000540)={0x0, 0x0, 0x6}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4(0xffffffffffffffff, &(0x7f00000003c0)=@ethernet, &(0x7f0000000440)=0x80, 0x80000)
setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000100), 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x401, 0xec, 0x1, 0x2, 0x0, {0x2}}, 0xfffffffe)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f0000000100), 0x1)
perf_event_open$cgroup(&(0x7f00000005c0)={0x3, 0x80, 0x9, 0x1, 0x0, 0x4, 0x0, 0x8000, 0x4200, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x4, @perf_config_ext={0x4, 0xffffffff}, 0x8000, 0x100000009, 0xfffffffd, 0x3, 0x100000000, 0x0, 0x8, 0x0, 0x800, 0x0, 0x9}, r2, 0x6, 0xffffffffffffffff, 0x1)
getpeername(r8, &(0x7f00000002c0)=@ieee802154, &(0x7f0000000340)=0x80)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000180)=0xc)
syz_io_uring_submit(r3, r5, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r7, 0x1ff, 0x0, 0x6, 0x0, 0x1}, 0x89)

[ 1667.768542] loop2: detected capacity change from 0 to 40
04:47:55 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0xee00, 0xee00}}, './file0\x00'})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x4})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:47:55 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:47:55 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x0, '\x00', [{0xffffff81, 0x2, 0x2, 0x7, 0x1ff, 0x8000}, {0x1, 0x8, 0x7ff, 0x1b0, 0x234d, 0x7ffffff7}], ['\x00', '\x00', '\x00', '\x00', '\x00']})

[ 1667.937617] syz-executor.2: attempt to access beyond end of device
[ 1667.937617] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1667.938993] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:48:08 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x600100, 0x0)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x1c9, 0x4)

04:48:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:48:08 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:48:08 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB='\x00\x00\f\t\x00\x00\x00\x00\x00\x000\x00'])
getpeername(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff}}, &(0x7f0000000100)=0x80)
sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x008\x00', @ANYRES32=r3, @ANYBLOB="e82984dbfc2b6241ada770e67f0ec6597c9a00003ccd9a9b35562b750d3e14c0779da7bf714b443b046d6f3f88f74bdeaa6fc7a3bf2145bf021237892c55716eb1"], 0x3b8}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'sit0\x00', <r5=>0x0, 0x29, 0x3, 0x6, 0x3f, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x21}, 0x1, 0x10, 0xfffffff8, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6tnl0\x00', <r6=>0x0, 0x0, 0x8, 0x1f, 0x7, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7820, 0x10, 0x2, 0x4}})
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000e00)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000f00)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000f40)={0xaa8, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x634c}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0xf}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xabc}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x1, 0x9, 0x4}, {0x8001, 0xca, 0x77, 0xf9}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x7f, 0x8, 0x6}, {0x9dd7, 0x7, 0x0, 0x3}, {0x6, 0x1, 0x0, 0x7a}, {0x8001, 0x7, 0x8, 0x41}, {0x5, 0x4, 0x8, 0x77}, {0x58e4, 0x81, 0x40, 0xffffffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x46}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4062}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x8, 0x9, 0x8}, {0x4, 0x1, 0x75, 0x911ae20}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x1f, 0x0, 0x3f}, {0x1, 0x5, 0xff, 0x4}, {0x7, 0x7, 0xe2, 0xdf}, {0x0, 0x75, 0x7, 0x2000004}, {0x8000, 0x7f, 0x8, 0x7f}, {0x7, 0x40, 0x3, 0x81}, {0x1ff, 0x1, 0x2, 0x9}, {0xf000, 0x60, 0x7, 0xfffffff8}, {0x6, 0x40, 0x2, 0x400}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}]}, 0xaa8}, 0x1, 0x0, 0x0, 0x884}, 0x20000001)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f0000000100), 0x1)
sendto$unix(r1, &(0x7f0000000200)='\f', 0x1, 0x80, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
getsockopt$IP_SET_OP_GET_BYINDEX(r8, 0x1, 0x53, &(0x7f00000005c0)={0x7, 0x7, 0x1}, &(0x7f0000000600)=0x28)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r9, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0xd0)

04:48:08 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:48:08 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x26, 0x4)

04:48:08 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xa328, @any, 0x3f, 0x2}, 0xe)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r2, 0x942c6000)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:48:08 executing program 4:
ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000040)={0x7fff, 0x20, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700)={<r1=>0x0, ""/256, <r2=>0x0, <r3=>0x0})
r4 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700)={<r5=>0x0, ""/256, <r6=>0x0, <r7=>0x0})
r8 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000070280)={0x6, [{<r9=>0x0}, {0x0, <r10=>0x0}, {}, {0x0, <r11=>0x0}, {<r12=>0x0}, {0x0, <r13=>0x0}, {0x0, <r14=>0x0}, {<r15=>0x0}, {<r16=>0x0, <r17=>0x0}, {0x0, <r18=>0x0}, {<r19=>0x0}, {<r20=>0x0, <r21=>0x0}, {<r22=>0x0}, {<r23=>0x0, <r24=>0x0}, {<r25=>0x0, <r26=>0x0}, {<r27=>0x0, <r28=>0x0}, {0x0, <r29=>0x0}, {0x0, <r30=>0x0}, {}, {}, {0x0, <r31=>0x0}, {0x0, <r32=>0x0}, {<r33=>0x0, <r34=>0x0}, {0x0, <r35=>0x0}, {<r36=>0x0}, {}, {<r37=>0x0}, {<r38=>0x0}, {<r39=>0x0, <r40=>0x0}, {<r41=>0x0}, {<r42=>0x0, <r43=>0x0}, {0x0, <r44=>0x0}, {<r45=>0x0, <r46=>0x0}, {<r47=>0x0}, {}, {<r48=>0x0}, {<r49=>0x0, <r50=>0x0}, {<r51=>0x0}, {0x0, <r52=>0x0}, {<r53=>0x0, <r54=>0x0}, {<r55=>0x0, <r56=>0x0}, {}, {<r57=>0x0, <r58=>0x0}, {<r59=>0x0, <r60=>0x0}, {}, {<r61=>0x0, <r62=>0x0}, {<r63=>0x0, <r64=>0x0}, {}, {<r65=>0x0}, {<r66=>r6}, {<r67=>0x0}, {0x0, <r68=>0x0}, {<r69=>0x0, <r70=>0x0}, {<r71=>0x0}, {<r72=>0x0, <r73=>0x0}, {0x0, <r74=>0x0}, {0x0, <r75=>0x0}, {0x0, <r76=>0x0}, {<r77=>0x0, <r78=>0x0}, {}, {0x0, <r79=>0x0}, {<r80=>0x0, <r81=>0x0}, {<r82=>0x0, <r83=>0x0}, {<r84=>0x0}, {<r85=>0x0, <r86=>0x0}, {<r87=>0x0}, {}, {<r88=>0x0, <r89=>0x0}, {0x0, <r90=>0x0}, {<r91=>0x0}, {<r92=>0x0, <r93=>0x0}, {<r94=>0x0, <r95=>0x0}, {}, {<r96=>0x0, <r97=>0x0}, {0x0, <r98=>0x0}, {<r99=>0x0, <r100=>0x0}, {<r101=>0x0}, {<r102=>0x0, <r103=>0x0}, {<r104=>0x0, <r105=>0x0}, {<r106=>0x0, <r107=>0x0}, {0x0, <r108=>0x0}, {}, {0x0, <r109=>0x0}, {<r110=>0x0, <r111=>0x0}, {<r112=>0x0, <r113=>0x0}, {0x0, <r114=>0x0}, {<r115=>0x0, <r116=>0x0}, {<r117=>0x0, <r118=>0x0}, {0x0, <r119=>0x0}, {<r120=>0x0, <r121=>0x0}, {}, {0x0, <r122=>0x0}, {<r123=>0x0}, {0x0, <r124=>0x0}, {<r125=>0x0, <r126=>0x0}, {}, {}, {<r127=>0x0, <r128=>0x0}, {<r129=>0x0}, {}, {<r130=>0x0}, {}, {<r131=>0x0}, {<r132=>0x0}, {<r133=>0x0}, {<r134=>0x0, <r135=>0x0}, {<r136=>0x0}, {<r137=>0x0, <r138=>0x0}, {<r139=>0x0, <r140=>0x0}, {<r141=>0x0, <r142=>0x0}, {<r143=>0x0, <r144=>0x0}, {<r145=>0x0, <r146=>0x0}, {0x0, <r147=>r7}, {<r148=>0x0}, {}, {0x0, <r149=>0x0}, {<r150=>0x0, <r151=>0x0}, {0x0, <r152=>0x0}, {<r153=>0x0, <r154=>0x0}, {<r155=>0x0, <r156=>0x0}, {<r157=>0x0}, {<r158=>0x0, <r159=>0x0}, {}, {0x0, <r160=>0x0}, {0x0, <r161=>0x0}, {<r162=>0x0, <r163=>0x0}, {<r164=>0x0, <r165=>0x0}, {}, {<r166=>0x0}, {<r167=>0x0, <r168=>0x0}, {<r169=>0x0}, {0x0, <r170=>0x0}, {<r171=>0x0, <r172=>0x0}, {<r173=>0x0, <r174=>0x0}, {0x0, <r175=>0x0}, {<r176=>0x0}, {<r177=>0x0, <r178=>0x0}, {<r179=>0x0, <r180=>0x0}, {<r181=>0x0}, {0x0, <r182=>0x0}, {<r183=>0x0}, {0x0, <r184=>0x0}, {0x0, <r185=>0x0}, {<r186=>0x0}, {0x0, <r187=>0x0}, {<r188=>0x0}, {<r189=>0x0, <r190=>0x0}, {<r191=>0x0, <r192=>0x0}, {0x0, <r193=>0x0}, {0x0, <r194=>0x0}, {<r195=>0x0, <r196=>0x0}, {}, {<r197=>0x0, <r198=>0x0}, {<r199=>0x0, <r200=>0x0}, {<r201=>0x0}, {<r202=>0x0}, {}, {<r203=>0x0, <r204=>0x0}, {}, {<r205=>0x0}, {<r206=>0x0, <r207=>0x0}, {}, {<r208=>0x0}, {<r209=>0x0, <r210=>0x0}, {0x0, <r211=>0x0}, {0x0, <r212=>0x0}, {0x0, <r213=>0x0}, {0x0, <r214=>0x0}, {<r215=>0x0, <r216=>0x0}, {<r217=>0x0}, {0x0, <r218=>0x0}, {}, {<r219=>0x0, <r220=>0x0}, {0x0, <r221=>0x0}, {<r222=>0x0, <r223=>0x0}, {0x0, <r224=>0x0}, {0x0, <r225=>0x0}, {<r226=>0x0}, {<r227=>0x0, <r228=>0x0}, {}, {<r229=>0x0, <r230=>0x0}, {<r231=>0x0, <r232=>0x0}, {<r233=>0x0}, {<r234=>0x0, <r235=>0x0}, {<r236=>0x0, <r237=>0x0}, {<r238=>0x0, <r239=>0x0}, {<r240=>0x0, <r241=>0x0}, {0x0, <r242=>0x0}, {0x0, <r243=>0x0}, {0x0, <r244=>0x0}, {0x0, <r245=>0x0}, {<r246=>0x0}, {0x0, <r247=>0x0}, {<r248=>0x0, <r249=>0x0}, {<r250=>0x0}, {0x0, <r251=>0x0}, {0x0, <r252=>0x0}, {<r253=>0x0, <r254=>0x0}, {<r255=>0x0, <r256=>0x0}, {}, {}, {}, {}, {}, {<r257=>0x0, <r258=>0x0}, {0x0, <r259=>0x0}, {<r260=>0x0, <r261=>0x0}, {<r262=>0x0}, {<r263=>0x0, <r264=>0x0}, {<r265=>0x0, <r266=>0x0}, {<r267=>0x0}, {0x0, <r268=>0x0}, {<r269=>0x0}, {}, {0x0, <r270=>0x0}, {<r271=>0x0}, {}, {<r272=>0x0}, {<r273=>0x0, <r274=>0x0}, {<r275=>0x0}, {<r276=>0x0, <r277=>0x0}, {}, {0x0, <r278=>0x0}, {0x0, <r279=>0x0}, {0x0, <r280=>0x0}, {<r281=>0x0, <r282=>0x0}, {}, {<r283=>0x0, <r284=>0x0}, {<r285=>0x0, <r286=>0x0}, {<r287=>0x0, <r288=>0x0}, {<r289=>0x0, <r290=>0x0}, {<r291=>0x0}, {<r292=>0x0, <r293=>0x0}, {0x0, <r294=>0x0}, {<r295=>0x0, <r296=>0x0}, {}, {<r297=>0x0}, {<r298=>0x0}, {}, {<r299=>0x0}, {<r300=>0x0}, {<r301=>0x0, <r302=>0x0}, {<r303=>0x0}, {0x0, <r304=>0x0}, {0x0, <r305=>0x0}, {0x0, <r306=>0x0}, {}, {}, {<r307=>0x0}, {}, {<r308=>0x0, <r309=>0x0}, {<r310=>0x0, <r311=>0x0}, {<r312=>0x0, <r313=>0x0}, {<r314=>0x0, <r315=>0x0}, {<r316=>0x0, <r317=>0x0}], 0x5, "af2f1a9317bc6f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f00000018c0)={0x800, [{r215, r11}, {r55, r56}, {r63, r62}, {r179, r165}, {r37, r315}, {r91, r142}, {r186, r210}, {r77, r235}, {r59, r242}, {r246, r274}, {r276}, {r238, r266}, {r37, r76}, {r65, r278}, {r123, r44}, {r57}, {r48, r184}, {r125, r97}, {r188, r185}, {0x0, r174}, {r197, r228}, {0x0, r170}, {}, {r38, r126}, {0x0, r245}, {r164, r54}, {r45, r182}, {r171, r97}, {r61, r95}, {r102, r304}, {r110, r239}, {r312, r156}, {r234, r128}, {r300, r180}, {r92}, {r285, r214}, {r303, r252}, {r199, r264}, {r131}, {r169, <r318=>r220}, {r117, r277}, {r12, r178}, {r238, r256}, {r77, r232}, {r115, r198}, {r42, r62}, {r72, r108}, {r162}, {r205, r152}, {r303, r90}, {<r319=>r181}, {r42, r268}, {r77, r258}, {r1, r43}, {r137, r161}, {r153, r168}, {r27, r163}, {r134, r225}, {r226, r50}, {r150, r90}, {r155, r309}, {r123, r159}, {r301, r317}, {r33}, {r269, r124}, {r69, r218}, {r281, r154}, {r299, r17}, {r82, r83}, {r19, r154}, {r42, r28}, {r157, r311}, {r209, r230}, {r112}, {r25, r98}, {r39, r187}, {0x0, r210}, {r240, r172}, {r273, r224}, {r195}, {r197}, {r189, r224}, {r253}, {r186, r18}, {0x0, r288}, {r167, r100}, {r20, r284}, {0x0, r193}, {r41, r58}, {r289, r119}, {r246}, {r248, r111}, {}, {0x0, r204}, {r236, r86}, {r297}, {r36, r35}, {r101, r290}, {r310, r190}, {r227}, {r173, r68}, {r130, r147}, {r222, r11}, {r15, r34}, {r130, r7}, {r197, r251}, {r150, r302}, {r87}, {r253, r175}, {r257}, {r215, r144}, {r265, r121}, {0x0, r193}, {r139, r247}, {r287, r293}, {r227}, {r133, r122}, {r265, r237}, {r202, r151}, {r85, r46}, {0x0, r60}, {r57, r196}, {r88}, {r316, r78}, {}, {r176, r126}, {r148}, {r307, r259}, {r66, r224}, {r260, r26}, {r45, r126}, {r5, r10}, {r51, r274}, {r23, r290}, {r53, r220}, {r271, r306}, {r49, r254}, {r104, r54}, {r183, r221}, {r217, r29}, {0x0, r270}, {r283, r256}, {r283, r249}, {0x0, r111}, {r148, r119}, {r263, r279}, {0x0, r128}, {r250, r286}, {r65, r50}, {r88, r114}, {r262, r70}, {r231, r200}, {r94, r182}, {r283, r35}, {r291, r178}, {r267, r78}, {r59, r198}, {r72, r113}, {r208, r313}, {r106, r282}, {r292, r187}, {r191, r14}, {r61, r116}, {r201, r161}, {r33}, {0x0, r149}, {r316}, {r206, r241}, {r158, r178}, {r67, r90}, {0x0, r185}, {r265, r75}, {r145, r168}, {r171, r170}, {r47}, {r177, r243}, {0x0, r138}, {r177, r204}, {r275, r237}, {r84, r107}, {r15, r223}, {r132, r280}, {0x0, r17}, {r47, r52}, {r80, r89}, {r71, r151}, {r314, r185}, {r276, r224}, {r167, r114}, {r316, r11}, {0x0, r207}, {0x0, r165}, {r298, r35}, {r96, r118}, {r120, r44}, {r303, r103}, {r33, r26}, {r1, r160}, {r272, r18}, {0x0, r187}, {r37, r109}, {r295, r13}, {}, {r308, r11}, {r181, r264}, {r37, r73}, {r150, r31}, {r134, r83}, {r291, r103}, {r136, r68}, {r129, r296}, {r297, r294}, {r203, r40}, {r141, r190}, {0x0, r244}, {r9, r160}, {r206, r34}, {0x0, r124}, {r22, r105}, {r104, r24}, {r166, r218}, {r263, r296}, {r248, r305}, {r12, r21}, {r143, r30}, {r219, r212}, {r303, r211}, {r112, r93}, {r49, r74}, {r72}, {r16, r196}, {r57, r194}, {r229, r192}, {r273, r95}, {r104, r288}, {r91, r121}, {r141, r304}, {r316, r62}, {r139, r126}, {r233, r216}, {r255, r93}, {r65, r32}, {r134, r135}, {r51}, {r208, r146}, {r33, r243}, {0x0, r196}, {r183, r213}, {r92, r140}, {r104, r3}, {r127, r81}, {r133, r64}, {r136, r79}, {r99, r274}, {r167, r261}], 0xf8, "1b6b05fdef269d"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000014c0)=ANY=[@ANYRES64=<r320=>r319, @ANYBLOB="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"])
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f00000012c0)={0x0, ""/256, 0x0, <r321=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000070280)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r320}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {0x0, r318}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {0x0, r321}], 0x5, "af2f1a9317bc6f"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000200)={0x0, r2, "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", "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"})
r322 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r322, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
syz_io_uring_complete(0x0)
r323 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r323, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$bt_BT_VOICE(r322, 0x112, 0xb, &(0x7f00000000c0)=0x3, 0x2)
ioctl$FITRIM(r323, 0xc0185879, &(0x7f0000000080)={0x81, 0x0, 0x100000000})

[ 1680.887907] loop2: detected capacity change from 0 to 40
[ 1680.928542] kworker/u4:2: attempt to access beyond end of device
[ 1680.928542] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1680.929394] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:48:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1680.953377] loop2: detected capacity change from 0 to 40
04:48:08 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, &(0x7f0000000040)=0x88)

04:48:08 executing program 6:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0)

04:48:08 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:48:08 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000280)={0x4, &(0x7f0000000200)=[{0x80, 0x0, 0xfffffffffffffffc, 0x1, 0x1}, {0x10001, 0x95, &(0x7f0000000000)="76a3547b638416223dcb2374552f45f53af4639381c4c97c48fdcd34de6f01bacc70c33c8491f220476c21dafd30a2c8fdb458fb7f5038259239cc2055bda98eca7d408ccf25ef020a06a56dddd749228508407de44031934362f23038cec1487de2ba7c8b7d7c42c3102dd051e6b48ae666d1965932c9c1b934e337993e15a9ce0a7adbc5e1da32982ee1bf9c7133fa4c31655703"}, {0x3ff, 0x63, &(0x7f00000000c0)="0be17268510e1caf5f37ce9b7c80cc1d5890333bdcdd7025821aa48d08c8806f9d98134a5c2c1c875929503482c442f8a87cc547ac397fda05f300a8a9488e4e32572ccbdd32c91c65345a756d3eb0b18dc395ef10cbec925caa5fc46f0df684e7d412", 0x1, 0x1}, {0xffff, 0x9c, &(0x7f0000000140)="a631e40368f6cf7c2ea068c1ddc5dac50434afa517c1524b7ac34e306ee2eb452e7d33e86d18d2d36b8246fdf9c9c2c685a5faa0201d9fc47d387433e3d4830eca47a349460b0be20bbc5f11a2edde1f3bb93b1d17f3193550a96aba1b2cda4fa4afd409eb43a675ea31c164fb93004e47faa48c60b359363aceee09b0a62348dd6e7857edf540112a5da0c6eabaaa973dcc8cf3bed51106a73353f1", 0x1, 0x1}]})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

[ 1681.104837] kworker/u4:1: attempt to access beyond end of device
[ 1681.104837] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1681.106427] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:48:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:48:08 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
ioctl$sock_ifreq(0xffffffffffffffff, 0x8931, &(0x7f0000000040)={'ip6erspan0\x00', @ifru_settings={0x0, 0x0, @fr=&(0x7f0000000000)={0x0, 0x80, 0x40, 0x2, 0x6, 0x8, 0x4}}})
syz_io_uring_setup(0x46ac, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)
bind$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x200, @none, 0xfff, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10, 0xffffffffffffffff, 0x10000000)
r6 = syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x1, 0x285}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x2004, @fd_index=0x7, 0x4, 0x3, 0xffffffe0, 0x1, 0x1, {0x1, r7}}, 0x6)
syz_io_uring_submit(r1, r5, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000080)="237f5efb5d8d353f0070eae1a2dac041d4ae955167ff6442cd999a37f344786a796879028455d77efa255fc52765d0b47e4ff86f025e3e94084e6f0aa2394a979827a041df4a1cd7a925fbd96d0878d135dfa6c0d5db2e134f9d834484561b1f82278384a1ddc3c0fb9985d25519836440514cde67486d6b9ac944ac", 0x0, 0x0, 0x1, {0x1, r7}}, 0xfff)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000280))

[ 1681.211544] loop2: detected capacity change from 0 to 40
04:48:08 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:48:08 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0)
r2 = syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x9, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000140)="a22e5f3b8877052e49103c535b9cfda83596c1f440e1bd8a5620a0a6822077e93f80ff6f768d81298eeaeaac", 0x2c, 0x7}, {&(0x7f0000000180)="dd72d43a5ddb6299fc2aa2df77d1e8f7fe706982fa8a8ecdcd6f9cb74e1a2b3199c30af3de0cbaacc9b6ba46c27973fd808f0f9ed15a2e1d9cc8759b4e3c3cb8cc8233b1d033a1e29b31d208096129190ee546f3fe8386c5db69fa583bd3542abd419c", 0x63, 0x80}, {&(0x7f0000000200)="e4cf650eb135235aa469111fb9a11f40066b6d5f2801c756a3258e499b990e0df752bba8679fcd7f4d4270bbf150e380192fd9db64287b21ef6bffee469b7e5212fcbbf684fbfe6150fcc48a1fdb4fd39b308c5570c61f21322b814dff41d55ecca9695ffeefa2171a8eded89727861f9ad601f2cf487efbec035bc6cdd22cc70b807f1eee6557fb07d499bd46d86723dfe00efc2e0fde4e5eee68b0efe003bf41fe2a2fdea0c104a940c6a8c8795d8b4d8fa4bc6281b7677bc44d555372693dd76cb9efaed2383dd6b28fc8", 0xcc, 0x100000000}, {&(0x7f0000000300), 0x0, 0xb1e}, {&(0x7f0000000340)="92b241", 0x3, 0x1f}, {&(0x7f0000000380)="f1864b06dcf44d089e0340a7aaee", 0xe, 0x10000}], 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="2f6465762f66756c6c002c2f6465762f66756c6c002c5e2c21145e5e2d7d2b2c2f2c2f6465762f66756c6c002c2c2e5d062ada2c2a292f243a26232b2c2c262b26485c649040292f2c2f6465762f66756c6c002c2a2d52ed5c2c736d61636b66736465663d2f6465762f66756c6c002c000cabe0e3e64c8e4da1f8b609f8e4024fa181d2e5366a1afb8cca0a8cdeb3f849b300cb1568fbcf960bc95652a86a23ad3bc59a5f26bcbd42b97e8028d413"])
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={r2, 0x80000000, 0x1, 0x5})
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e21, 0x400, @private0, 0x20}}, 0x0, 0x0, 0x4f, 0x0, "532b431fb43d34f2f0fb8d92f5a8dead749070a38f246170dbf3fd21709c5bee57b3e4e8decbb703b77a2d3b50a23d9099b9c062f2eb369e65ddbe84e5a63908d492220faea4d3bcfc40e2079fde27b3"}, 0xd8)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x95, 0x7, 0x7, 0x0, 0xa4ed, 0x802c, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x5, 0x1000}, 0x8001, 0xffffffff7fffffff, 0x4, 0x8, 0x80, 0x0, 0x81, 0x0, 0x8, 0x0, 0xfffffffffffffff8}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r3, 0x2, 0x10000, 0x1000000000002ae6, 0x400000043})

[ 1681.346158] kworker/u4:2: attempt to access beyond end of device
[ 1681.346158] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1681.347655] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:48:21 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:48:21 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:48:21 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5, @any, 0x200}, 0xe)
r1 = dup3(r0, r0, 0x80000)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3ff, @none, 0xa48, 0x2}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x3, @none, 0x100, 0x2}, 0xe)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xbf, 0xecdc})
openat(r1, &(0x7f0000000540)='./file0\x00', 0x202, 0x54)

04:48:21 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup2(r0, r0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @none, 0x1, 0x2}, 0xe)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:48:21 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0)
openat(r1, &(0x7f0000000040)='./file0\x00', 0x2200, 0x9)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:48:21 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB='\x00\x00\f\t\x00\x00\x00\x00\x00\x000\x00'])
getpeername(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff}}, &(0x7f0000000100)=0x80)
sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x008\x00', @ANYRES32=r3, @ANYBLOB="e82984dbfc2b6241ada770e67f0ec6597c9a00003ccd9a9b35562b750d3e14c0779da7bf714b443b046d6f3f88f74bdeaa6fc7a3bf2145bf021237892c55716eb1"], 0x3b8}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'sit0\x00', <r5=>0x0, 0x29, 0x3, 0x6, 0x3f, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x21}, 0x1, 0x10, 0xfffffff8, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6tnl0\x00', <r6=>0x0, 0x0, 0x8, 0x1f, 0x7, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7820, 0x10, 0x2, 0x4}})
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000e00)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000f00)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000f40)={0xaa8, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x634c}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0xf}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xabc}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x1, 0x9, 0x4}, {0x8001, 0xca, 0x77, 0xf9}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x7f, 0x8, 0x6}, {0x9dd7, 0x7, 0x0, 0x3}, {0x6, 0x1, 0x0, 0x7a}, {0x8001, 0x7, 0x8, 0x41}, {0x5, 0x4, 0x8, 0x77}, {0x58e4, 0x81, 0x40, 0xffffffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x46}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4062}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x8, 0x9, 0x8}, {0x4, 0x1, 0x75, 0x911ae20}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x1f, 0x0, 0x3f}, {0x1, 0x5, 0xff, 0x4}, {0x7, 0x7, 0xe2, 0xdf}, {0x0, 0x75, 0x7, 0x2000004}, {0x8000, 0x7f, 0x8, 0x7f}, {0x7, 0x40, 0x3, 0x81}, {0x1ff, 0x1, 0x2, 0x9}, {0xf000, 0x60, 0x7, 0xfffffff8}, {0x6, 0x40, 0x2, 0x400}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}]}, 0xaa8}, 0x1, 0x0, 0x0, 0x884}, 0x20000001)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f0000000100), 0x1)
sendto$unix(r1, &(0x7f0000000200)='\f', 0x1, 0x80, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
getsockopt$IP_SET_OP_GET_BYINDEX(r8, 0x1, 0x53, &(0x7f00000005c0)={0x7, 0x7, 0x1}, &(0x7f0000000600)=0x28)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3)

[ 1694.163947] loop2: detected capacity change from 0 to 40
04:48:21 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:48:21 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
r1 = openat(r0, &(0x7f0000000300)='./file0\x00', 0x42000, 0x42)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, &(0x7f0000000080))

04:48:21 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xff4c}, 0xe)

04:48:21 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0xb, 0x4)
ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040))
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x1, 0x9, 0x100, 0xe7, 0x3, 0x4acc3ea4}, {0x81, 0x3ff, 0x800, 0x4}], ['\x00', '\x00', '\x00', '\x00']})
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

[ 1694.254408] kworker/u4:1: attempt to access beyond end of device
[ 1694.254408] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1694.255260] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:48:21 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:48:21 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:48:21 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
shutdown(r2, 0x1)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000000))

04:48:21 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x6, @none, 0x8, 0x1}, 0xe)

04:48:21 executing program 6:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7ff, @none, 0xa43, 0x2}, 0xe)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7fff}}, './file0\x00'})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0)

[ 1694.348740] loop2: detected capacity change from 0 to 40
04:48:22 executing program 5:
pkey_alloc(0x0, 0x3)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100)=0x13)

04:48:22 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:48:22 executing program 6:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c160000", @ANYRES16=r1, @ANYBLOB="040028bd7000ffdbdf254100000008000300", @ANYRES32=0x0, @ANYBLOB="08002600c81400000800a000ffff00000800a00020000000080026006c090000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000050}, 0x40400c1)
sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x2c}}, 0x20004001)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1f, 0x63}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000011)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, 0x0)

[ 1694.519247] kworker/u4:0: attempt to access beyond end of device
[ 1694.519247] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1694.520926] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:48:22 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:48:22 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200040, 0x80)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:48:22 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

[ 1694.677787] loop2: detected capacity change from 0 to 40
[ 1694.843807] kworker/u4:0: attempt to access beyond end of device
[ 1694.843807] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1694.845931] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:48:22 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
write(r0, &(0x7f0000000000)="419aedcc4bf6179e38932ffc81a53393f539631abc03062890b2f63cae0065095f2b6839619295a1ad6d672c9f00afa818bf1c5205353ae59238d5b22f8a09a46c771e86d16b676d9f88f2a123fbf2af90acdc8f1e38993e87b9d7c657f18aa658d5dcf9567a814a762d5eb71fac54d821233a4b25181212051b52e906112508542175df20bb36d499a4ce8dfafa51ef09c17f608a7938524b5c890f86fb32fad413fe12ea1a5daa6aa12128790edc15543f2492ab3ea8f8af2e9d6daa88a6c139e74643449e664dab1c085d33103d322943222102ab3653a2efc748bd4259cef90083de1788063a64943e4456bb799ffcdd", 0xf2)

04:48:22 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:48:22 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'nr0\x00', {0x20}})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x422a40, 0x55)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c160000", @ANYRES16=r2, @ANYBLOB="040028bd7000ffdbdf254100000008000300", @ANYRES32=0x0, @ANYBLOB="08002600c81400000800a000ffff00000800a00020000000080026006c090000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000050}, 0x40400c1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0xd}}}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "01e27a2a48d695db"}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000)

04:48:22 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:48:22 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:48:22 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x1}, 0xe)

04:48:22 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB='\x00\x00\f\t\x00\x00\x00\x00\x00\x000\x00'])
getpeername(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff}}, &(0x7f0000000100)=0x80)
sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x008\x00', @ANYRES32=r3, @ANYBLOB="e82984dbfc2b6241ada770e67f0ec6597c9a00003ccd9a9b35562b750d3e14c0779da7bf714b443b046d6f3f88f74bdeaa6fc7a3bf2145bf021237892c55716eb1"], 0x3b8}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'sit0\x00', <r5=>0x0, 0x29, 0x3, 0x6, 0x3f, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x21}, 0x1, 0x10, 0xfffffff8, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6tnl0\x00', <r6=>0x0, 0x0, 0x8, 0x1f, 0x7, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7820, 0x10, 0x2, 0x4}})
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000e00)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000f00)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000f40)={0xaa8, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x634c}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0xf}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xabc}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x1, 0x9, 0x4}, {0x8001, 0xca, 0x77, 0xf9}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x7f, 0x8, 0x6}, {0x9dd7, 0x7, 0x0, 0x3}, {0x6, 0x1, 0x0, 0x7a}, {0x8001, 0x7, 0x8, 0x41}, {0x5, 0x4, 0x8, 0x77}, {0x58e4, 0x81, 0x40, 0xffffffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x46}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4062}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x8, 0x9, 0x8}, {0x4, 0x1, 0x75, 0x911ae20}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x1f, 0x0, 0x3f}, {0x1, 0x5, 0xff, 0x4}, {0x7, 0x7, 0xe2, 0xdf}, {0x0, 0x75, 0x7, 0x2000004}, {0x8000, 0x7f, 0x8, 0x7f}, {0x7, 0x40, 0x3, 0x81}, {0x1ff, 0x1, 0x2, 0x9}, {0xf000, 0x60, 0x7, 0xfffffff8}, {0x6, 0x40, 0x2, 0x400}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}]}, 0xaa8}, 0x1, 0x0, 0x0, 0x884}, 0x20000001)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f0000000100), 0x1)
sendto$unix(r1, &(0x7f0000000200)='\f', 0x1, 0x80, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
getsockopt$IP_SET_OP_GET_BYINDEX(r8, 0x1, 0x53, &(0x7f00000005c0)={0x7, 0x7, 0x1}, &(0x7f0000000600)=0x28)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440))

[ 1695.281657] loop2: detected capacity change from 0 to 40
[ 1695.426511] syz-executor.2: attempt to access beyond end of device
[ 1695.426511] loop2: rw=2049, sector=44, nr_sectors = 80 limit=40
[ 1695.432743] syz-executor.2: attempt to access beyond end of device
[ 1695.432743] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1695.434937] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1703.241230] Bluetooth: hci3: command 0x0406 tx timeout
04:48:40 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB='\x00\x00\f\t\x00\x00\x00\x00\x00\x000\x00'])
getpeername(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff}}, &(0x7f0000000100)=0x80)
sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x008\x00', @ANYRES32=r3, @ANYBLOB="e82984dbfc2b6241ada770e67f0ec6597c9a00003ccd9a9b35562b750d3e14c0779da7bf714b443b046d6f3f88f74bdeaa6fc7a3bf2145bf021237892c55716eb1"], 0x3b8}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'sit0\x00', <r5=>0x0, 0x29, 0x3, 0x6, 0x3f, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x21}, 0x1, 0x10, 0xfffffff8, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6tnl0\x00', <r6=>0x0, 0x0, 0x8, 0x1f, 0x7, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7820, 0x10, 0x2, 0x4}})
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000e00)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000f00)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000f40)={0xaa8, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x634c}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0xf}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xabc}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x1, 0x9, 0x4}, {0x8001, 0xca, 0x77, 0xf9}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x7f, 0x8, 0x6}, {0x9dd7, 0x7, 0x0, 0x3}, {0x6, 0x1, 0x0, 0x7a}, {0x8001, 0x7, 0x8, 0x41}, {0x5, 0x4, 0x8, 0x77}, {0x58e4, 0x81, 0x40, 0xffffffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x46}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4062}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x8, 0x9, 0x8}, {0x4, 0x1, 0x75, 0x911ae20}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x1f, 0x0, 0x3f}, {0x1, 0x5, 0xff, 0x4}, {0x7, 0x7, 0xe2, 0xdf}, {0x0, 0x75, 0x7, 0x2000004}, {0x8000, 0x7f, 0x8, 0x7f}, {0x7, 0x40, 0x3, 0x81}, {0x1ff, 0x1, 0x2, 0x9}, {0xf000, 0x60, 0x7, 0xfffffff8}, {0x6, 0x40, 0x2, 0x400}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}]}, 0xaa8}, 0x1, 0x0, 0x0, 0x884}, 0x20000001)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f0000000100), 0x1)
sendto$unix(r1, &(0x7f0000000200)='\f', 0x1, 0x80, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
getsockopt$IP_SET_OP_GET_BYINDEX(r8, 0x1, 0x53, &(0x7f00000005c0)={0x7, 0x7, 0x1}, &(0x7f0000000600)=0x28)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)

04:48:40 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)={0x3, 'ip6erspan0\x00', {0x7}, 0x1f2})
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:48:40 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x480840, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8, 0x1}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:48:40 executing program 7:
r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000)
r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x9]}, 0x8, 0x80800)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r0, r2, &(0x7f0000000080)=0x4, 0x3)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018fe0000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="02000000000000002e2f66696c653000"])
r4 = openat$cgroup_devices(r0, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000002c40)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r5, 0x0, &(0x7f0000002c00)={&(0x7f0000002900)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002980)=""/85, 0x55}, {&(0x7f0000002a00)=""/203, 0xcb}, {&(0x7f0000002b00)=""/98, 0x62}], 0x3, &(0x7f0000002bc0)=""/31, 0x1f}, 0x0, 0x0, 0x0, {0x16d}}, 0x100)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r6, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r6)
r7 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x12540, 0x0)
fchdir(r7)
finit_module(r4, &(0x7f0000000180)='\xff\xff\xff\xff\xff\xff', 0x2)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x9, @none, 0x5, 0xefaafd401b2e8639}, 0xe)

04:48:40 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:48:40 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:48:40 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80800)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, &(0x7f0000000080)=0xffe0)

04:48:40 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xff4c}, 0xe)

[ 1713.338019] loop2: detected capacity change from 0 to 40
04:48:41 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
io_setup(0x9, &(0x7f0000000140)=<r1=>0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}])
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000000)="195fd925b8710aecad9381cf4f3d84973d0775b66defea8ef79e18f73d999b04fc867d2f3e4eac00ec56b8a50d18198db4d24f33513432af364c03818baab252da7ca56d181a838f3d9a9e9b2c327220ff48f280442c6a5c5b809ee7e03e02249b94303db9faeaceea5d5fcb3146e434f1dff697bc4f7a0451b1bbd2c32cc450b4bcc50e33be4fd0aa313ea8a60879c0c4ceb5001984654214e417194366fa2b84c777133997853bdb3601bd01f60b7e97ae4c6e", 0xb4, 0x4, 0x0, 0x2, r3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x7fff, r0, &(0x7f0000000100)="c02ee394077a55856f21b4deb3185be822fdc8c224ce35dc86d797bcf168fda51727ba58bce2c617bb6aaac6f23dfcad157c0dc86277a1bb", 0x38, 0x9, 0x0, 0x3}])

[ 1713.382051] syz-executor.2: attempt to access beyond end of device
[ 1713.382051] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:48:41 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1713.456974] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1713.458341] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1713.459345] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1713.460282] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00
[ 1713.461348] blk_print_req_error: 7 callbacks suppressed
[ 1713.461364] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2
[ 1713.468525] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1713.469330] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1713.470501] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1713.471698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1713.472642] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1713.473827] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1713.474977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1713.476017] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1713.477186] Buffer I/O error on dev sr0, logical block 2, async page read
[ 1713.478368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1713.479193] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1713.480334] Buffer I/O error on dev sr0, logical block 3, async page read
[ 1713.482519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1713.482604] kworker/u4:11: attempt to access beyond end of device
[ 1713.482604] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1713.483338] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1713.483406] Buffer I/O error on dev sr0, logical block 4, async page read
[ 1713.485587] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1713.486340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1713.486738] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1713.487367] Buffer I/O error on dev sr0, logical block 5, async page read
[ 1713.489144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1713.489541] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1713.490164] Buffer I/O error on dev sr0, logical block 6, async page read
[ 1713.491121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1713.491515] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1713.492285] Buffer I/O error on dev sr0, logical block 7, async page read
[ 1713.498859] kworker/u4:11: attempt to access beyond end of device
[ 1713.498859] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1713.499768] kworker/u4:11: attempt to access beyond end of device
[ 1713.499768] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1713.500632] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:48:41 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x2, @none}, 0xe)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x20, 0x4)

04:48:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:48:41 executing program 6:
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xdb9454602c9d1ff0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000)
ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000000))
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000004)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000140)={{r2}, {@void, @actul_num={@void, 0x7f, 0x50}}})

04:48:41 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
tee(r1, r0, 0x2, 0x4)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:48:41 executing program 7:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @none}, 0xe)

[ 1713.643587] loop2: detected capacity change from 0 to 40
04:48:41 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup2(r0, r0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @none, 0x1, 0x2}, 0xe)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

[ 1713.803805] syz-executor.2: attempt to access beyond end of device
[ 1713.803805] loop2: rw=2049, sector=44, nr_sectors = 80 limit=40
[ 1713.805880] syz-executor.2: attempt to access beyond end of device
[ 1713.805880] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1715.785229] Bluetooth: hci3: command 0x0405 tx timeout
04:48:55 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup2(r0, r0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @none, 0x1, 0x2}, 0xe)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:48:55 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
read(r0, &(0x7f0000000000)=""/4096, 0x1000)

04:48:55 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'vlan0\x00', {'vlan1\x00'}, 0x7})

[ 1728.158715] loop2: detected capacity change from 0 to 40
04:48:55 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB='\x00\x00\f\t\x00\x00\x00\x00\x00\x000\x00'])
getpeername(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff}}, &(0x7f0000000100)=0x80)
sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x008\x00', @ANYRES32=r3, @ANYBLOB="e82984dbfc2b6241ada770e67f0ec6597c9a00003ccd9a9b35562b750d3e14c0779da7bf714b443b046d6f3f88f74bdeaa6fc7a3bf2145bf021237892c55716eb1"], 0x3b8}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'sit0\x00', <r4=>0x0, 0x29, 0x3, 0x6, 0x3f, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x21}, 0x1, 0x10, 0xfffffff8, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6tnl0\x00', <r5=>0x0, 0x0, 0x8, 0x1f, 0x7, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7820, 0x10, 0x2, 0x4}})
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000e00)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000f00)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000f40)={0xaa8, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x634c}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0xf}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xabc}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x1, 0x9, 0x4}, {0x8001, 0xca, 0x77, 0xf9}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x7f, 0x8, 0x6}, {0x9dd7, 0x7, 0x0, 0x3}, {0x6, 0x1, 0x0, 0x7a}, {0x8001, 0x7, 0x8, 0x41}, {0x5, 0x4, 0x8, 0x77}, {0x58e4, 0x81, 0x40, 0xffffffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x46}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4062}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x8, 0x9, 0x8}, {0x4, 0x1, 0x75, 0x911ae20}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x1f, 0x0, 0x3f}, {0x1, 0x5, 0xff, 0x4}, {0x7, 0x7, 0xe2, 0xdf}, {0x0, 0x75, 0x7, 0x2000004}, {0x8000, 0x7f, 0x8, 0x7f}, {0x7, 0x40, 0x3, 0x81}, {0x1ff, 0x1, 0x2, 0x9}, {0xf000, 0x60, 0x7, 0xfffffff8}, {0x6, 0x40, 0x2, 0x400}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}]}, 0xaa8}, 0x1, 0x0, 0x0, 0x884}, 0x20000001)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000100), 0x1)
sendto$unix(r1, &(0x7f0000000200)='\f', 0x1, 0x80, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
getsockopt$IP_SET_OP_GET_BYINDEX(r7, 0x1, 0x53, &(0x7f00000005c0)={0x7, 0x7, 0x1}, &(0x7f0000000600)=0x28)

04:48:55 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="632e0000000062fb680f0d04ce00002e"])
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:48:55 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:48:55 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:48:55 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1728.189470] syz-executor.2: attempt to access beyond end of device
[ 1728.189470] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
[ 1728.214000] kworker/u4:10: attempt to access beyond end of device
[ 1728.214000] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1728.214858] buffer_io_error: 1 callbacks suppressed
[ 1728.214866] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1728.216197] kworker/u4:10: attempt to access beyond end of device
[ 1728.216197] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1728.217210] kworker/u4:10: attempt to access beyond end of device
[ 1728.217210] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1728.218363] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:48:55 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1728.278345] loop2: detected capacity change from 0 to 40
[ 1728.309972] syz-executor.2: attempt to access beyond end of device
[ 1728.309972] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
[ 1728.354058] kworker/u4:6: attempt to access beyond end of device
[ 1728.354058] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1728.355679] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1728.364357] kworker/u4:6: attempt to access beyond end of device
[ 1728.364357] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1728.366477] kworker/u4:6: attempt to access beyond end of device
[ 1728.366477] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1728.368045] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:49:09 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup2(r0, r0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @none, 0x1, 0x2}, 0xe)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:49:09 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xeb, 0xffffffff}}, './file0\x00'})
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000100)={'security\x00', 0x19, "339262d7d5335dbfaa7069131b83960ccb3b36c60395efd4d0"}, &(0x7f0000000140)=0x3d)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xa4d, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x2}, 0xe)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000080)=0x4)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0)

04:49:09 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:49:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:49:09 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:49:09 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

04:49:09 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB='\x00\x00\f\t\x00\x00\x00\x00\x00\x000\x00'])
getpeername(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff}}, &(0x7f0000000100)=0x80)
sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="b8030000110000022cbd7000fbdbdf251a0000009500848047cd067c4b2c80ef823db67d60ba90f3763015f38ef5c8256b8ae2d9879f2c106a5595c2cf75dd7fd440f6a89ee29de6bacc79b133db3e4cc06ef4b8d0419dd0af775a417357ab8139396257ea165754655d82ef293cc5964f7aed12a5fbd4a0339058661e30a88b047a5ce8a6eac92bd89b73004b366678c366b7f3be4d908c91baa5e94ba821168008005e00ac1e01010000000c00708008004000e0000001e8017d8022aa5dbc6cfb8dd51da19cef3ff383d53207ae6975730cbc88f5b454625789de3f3bf904b3c55ae6aa67b3c1a713011ca785585a213897379b19ec73f9d90dcaf8220172a1cf7cb40c000a0004000000000000001d7ec8c60846cbdfa38c24a038a049d7458535e64046fe076cf4d715364db23408d9d787a55e8c15ef883a428749f95bc9d9d75e89eff0e76cded9c42379ce6a6bae995deeb20e1a6b2190d34025e2dbea2faa53a4cb69da0855155c97f2286b36781c8b092e035f806553cf69a37eebb10e22838d14c99c95872d04ed33f719bfad924b55064b50a4fcff0f17dbf6b6e8e9d84b49aaa958902a33cc6c98e577277d003babff8213b2c004004a0008004400e0000001cfca470b1b18f08eeb78825414246b21f91216637f91e53b1735ef26a015c1673622d33f83e6d2dd8799ca5e3d85b18b47589e49969b74017c92eae549e030df9f69d7de705cb7e9f38312228aa7a0e2c49bad07e9b289771e223a3c0e99ec4adef0b48b3a69be0a5a9516263fa00daa1acf0848049525dcb85c1415074faa785f550ada1607c332901a2440c739ad467b8ce56802f458b96904ea4a702a6083a637b24252bfa11c6a545ad7c99cf71850a6f0a0191a65cd04c64d2bf3809d845852917a08e9e957e1a480386249f7d3af4a6c4f1c071a81d64ef84433597872b467b36f653a07710db34dbd4f7eeacda4790b2ec6eca7a01a8c8fa4c937662ce2308e671ff86daa276b0c41ae72f92b55c299e2ac616b602b8d6c52b1989f729960ec023ab1d2ceb238405a7e302f54f0731381e8e26df842e57466373763416f16bf17518e99551375936765100b4c4a0df062c6a0a49589f594b251654a1e322457e494f1466c1787eb265355320433a2e11e62a17f4bea4cbc7d4686ba46636b146ad16677fc921732b2c12442fb56226a0ba7dc3a6b1bc585b2da3adeee4f4430497897545bbc6e00f487c77bf3f1f9b864de8c8052922e3a9975e3b20483efbdf4adba0acc44c1fd27bdfc29a247d809f0bfeb5a180089800400510008004c00", @ANYRES32=0x0, @ANYBLOB='\b\x008\x00', @ANYRES32=r3, @ANYBLOB="e82984dbfc2b6241ada770e67f0ec6597c9a00003ccd9a9b35562b750d3e14c0779da7bf714b443b046d6f3f88f74bdeaa6fc7a3bf2145bf021237892c55716eb1"], 0x3b8}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'sit0\x00', <r4=>0x0, 0x29, 0x3, 0x6, 0x3f, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x21}, 0x1, 0x10, 0xfffffff8, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6tnl0\x00', <r5=>0x0, 0x0, 0x8, 0x1f, 0x7, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7820, 0x10, 0x2, 0x4}})
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000e00)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000f00)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000f40)={0xaa8, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x634c}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0xf}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xabc}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x1, 0x9, 0x4}, {0x8001, 0xca, 0x77, 0xf9}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x7f, 0x8, 0x6}, {0x9dd7, 0x7, 0x0, 0x3}, {0x6, 0x1, 0x0, 0x7a}, {0x8001, 0x7, 0x8, 0x41}, {0x5, 0x4, 0x8, 0x77}, {0x58e4, 0x81, 0x40, 0xffffffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x46}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4062}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x8, 0x9, 0x8}, {0x4, 0x1, 0x75, 0x911ae20}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x1f, 0x0, 0x3f}, {0x1, 0x5, 0xff, 0x4}, {0x7, 0x7, 0xe2, 0xdf}, {0x0, 0x75, 0x7, 0x2000004}, {0x8000, 0x7f, 0x8, 0x7f}, {0x7, 0x40, 0x3, 0x81}, {0x1ff, 0x1, 0x2, 0x9}, {0xf000, 0x60, 0x7, 0xfffffff8}, {0x6, 0x40, 0x2, 0x400}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}]}, 0xaa8}, 0x1, 0x0, 0x0, 0x884}, 0x20000001)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000100), 0x1)
sendto$unix(r1, &(0x7f0000000200)='\f', 0x1, 0x80, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)

04:49:09 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000000)=""/58, 0x3a}, {&(0x7f0000000040)=""/118, 0x76}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/211, 0xd3}, {&(0x7f0000001300)=""/248, 0xf8}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000002400)=""/220, 0xdc}], 0x9, &(0x7f00000025c0)=""/4096, 0x1000}, 0x1}], 0x1, 0x10020, &(0x7f00000035c0))
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000004680)={0x0, <r4=>0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
perf_event_open(&(0x7f0000004600)={0x2, 0x80, 0x6c, 0x8, 0x7, 0x1, 0x0, 0xd3, 0x4000, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x80, 0x3}, 0x20, 0x7, 0x1, 0x0, 0x7e2, 0x736, 0x100, 0x0, 0x8, 0x0, 0x5}, r4, 0x4, r5, 0x3)
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000900)={0x4, 0x4, {0x8000000000000, @usage=0x400, 0x0, 0xf5, 0x80d, 0x4, 0x855, 0x7f, 0x20, @struct={0xc421, 0x9}, 0x6, 0xff, [0x8, 0x4, 0x4, 0x809, 0xe70d, 0x7e10c57]}, {0x8, @struct={0x1f, 0x8}, 0x0, 0x401, 0x9, 0x4, 0xe24000000, 0x8, 0x411, @struct={0x6, 0x2}, 0xd89, 0x1, [0x0, 0x4, 0x8, 0x1f, 0x3, 0x81]}, {0x7, @usage=0x80000000, r3, 0x8, 0x3, 0x7ff, 0x7fff, 0xffffffffffffff44, 0x8, @struct={0x1, 0x80000001}, 0x3, 0x40, [0xac9c, 0x4, 0xfffffffffffffffc, 0xffff, 0xfffffffffffff001, 0x9]}, {0x10000, 0x6, 0x1}})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000003600)={r3, "9ef06ff8dbfd5496a458d148a2579b09"})

[ 1741.871194] loop2: detected capacity change from 0 to 40
04:49:09 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x1ff, 0x2)

04:49:09 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000400)={0x1f, 0x100, @none, 0x8000}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_per_queue_op={0x4b, 0xe, [0x8, 0x5, 0xffffff0c, 0x50, 0x2, 0xfff, 0x6, 0x3, 0x20, 0x148, 0x9, 0x5, 0x3, 0x8eab, 0x1, 0xfffffff7, 0xfff, 0x69e, 0x7ff, 0x9, 0xfe84, 0x7, 0x33, 0x1, 0x200, 0xff, 0x1, 0x9, 0x1, 0x64, 0x2, 0x7, 0x80, 0x3, 0x8, 0x7, 0x8, 0x1, 0x6, 0x1f, 0x800, 0x8, 0x80, 0x59, 0x7fff, 0x7fff, 0x2, 0x1, 0x400, 0x1, 0x4000001f, 0x3, 0x90d, 0x1, 0x3, 0x5, 0x6, 0x3, 0x559, 0xfd43, 0x0, 0x7, 0x401, 0x5, 0xffffffff, 0xfffffc00, 0x5, 0x92, 0x0, 0x10001, 0x2, 0x9, 0x4, 0x7, 0x800, 0x9c9, 0x9, 0x10000, 0x6, 0xb01, 0x9, 0x5, 0x512e994e, 0x7, 0x0, 0x8, 0x1, 0x0, 0x3, 0xf5, 0x0, 0xfffffff8, 0x100, 0xfffffeff, 0x2, 0x40, 0xffffffff, 0x1, 0x7f, 0x1ff, 0x3, 0x401, 0x2, 0x8000, 0x5a, 0x1f, 0x9, 0x3, 0x2, 0x8, 0x8001, 0x7, 0x10001, 0x401, 0x9, 0x1000, 0xe43, 0x10001, 0x4, 0xfffffff8, 0x4, 0x2, 0xb7, 0x7fff, 0x2, 0xfffffff9, 0x4, 0x1], "76a9639c6c3fc69272da64bf16360c876933e26253a19b726627913414825cc7180e549e48509f779338b5701702f93595776cf987584e567609cc10f69729461319b1b550806ee9b90c4a8ef7954c4356bfffc826db597a5d52b9b6b3902072c06f399977cb2db2461a1172f68c8f2456c6d426b0ef4afcebf82f654dc072392712e5daf335aab41e4d4888623bfe3381ed47c049c45d77af1d859cfa0994961c4cf796bcdc5644a6e4d89fd487e40dfc14b29f9e1f7bb14863165c7528a306825c0b620c15b47200588cd711cd90221358001b17b9efa618d72e7b3aeea7d73a021cfa45"}})
setsockopt(r0, 0x3, 0x20, &(0x7f0000000340)="f15e3c186a9b5f208d55d1aef39241bf84abca9cdaf4046659c564e6f9b55606d95ea50c85c1c8bd2a08cb9eee15aaf72372c43c6c69b346c173771859f89bd377fac884a1d7f1500fc2e29670ebebe628f5a904e0b4082a67f48254dc0b604eb24d82028f08cb2902430f157cce7dbb6ea9b60d48dcf78af326273d933474a1685b3983b2f0e28769d9a150e9ab7eb734f9975e34b7c6ed6f9d68fa259844c392", 0xa1)

[ 1741.915972] syz-executor.2: attempt to access beyond end of device
[ 1741.915972] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
[ 1741.963701] kworker/u4:6: attempt to access beyond end of device
[ 1741.963701] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1741.964641] Buffer I/O error on dev loop2, logical block 14, lost async page write
04:49:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1741.965270] kworker/u4:6: attempt to access beyond end of device
[ 1741.965270] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1741.967621] kworker/u4:6: attempt to access beyond end of device
[ 1741.967621] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1741.968517] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:49:09 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup2(r0, r0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @none, 0x1, 0x2}, 0xe)

04:49:09 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0xc, "a870a7"}, 0x6)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$FIONREAD(r2, 0x5608, &(0x7f0000000040))
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f00000000c0))
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x52}, 0xe)

[ 1742.058209] loop2: detected capacity change from 0 to 40
04:49:09 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup2(r0, r0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)

[ 1742.137521] syz-executor.2: attempt to access beyond end of device
[ 1742.137521] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:49:09 executing program 6:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', <r1=>0x0, 0x6, 0x94, 0x6, 0x6, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x7, 0x8008, 0x200, 0x3}})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x24, r1})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0)

04:49:09 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:49:09 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)

[ 1742.270526] kworker/u4:5: attempt to access beyond end of device
[ 1742.270526] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1742.271390] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1742.272019] kworker/u4:5: attempt to access beyond end of device
[ 1742.272019] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1742.272912] kworker/u4:5: attempt to access beyond end of device
[ 1742.272912] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1742.273746] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:49:09 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x7fffffff}}, './file0\x00'})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:49:10 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:49:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:49:10 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)

[ 1742.699653] loop2: detected capacity change from 0 to 40
04:49:10 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000400)={{0x2, 0x0, 0x0, 0x0, r1, 0x1, 0x2}, 0x2, 0xab9c, 0x0, 0x0, 0x0, 0x0, 0x1ff})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r1}}, './file0\x00'})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

[ 1742.744364] syz-executor.2: attempt to access beyond end of device
[ 1742.744364] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:49:10 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB='\x00\x00\f\t\x00\x00\x00\x00\x00\x000\x00'])
getpeername(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff}}, &(0x7f0000000100)=0x80)
sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="b8030000110000022cbd7000fbdbdf251a0000009500848047cd067c4b2c80ef823db67d60ba90f3763015f38ef5c8256b8ae2d9879f2c106a5595c2cf75dd7fd440f6a89ee29de6bacc79b133db3e4cc06ef4b8d0419dd0af775a417357ab8139396257ea165754655d82ef293cc5964f7aed12a5fbd4a0339058661e30a88b047a5ce8a6eac92bd89b73004b366678c366b7f3be4d908c91baa5e94ba821168008005e00ac1e01010000000c00708008004000e0000001e8017d8022aa5dbc6cfb8dd51da19cef3ff383d53207ae6975730cbc88f5b454625789de3f3bf904b3c55ae6aa67b3c1a713011ca785585a213897379b19ec73f9d90dcaf8220172a1cf7cb40c000a0004000000000000001d7ec8c60846cbdfa38c24a038a049d7458535e64046fe076cf4d715364db23408d9d787a55e8c15ef883a428749f95bc9d9d75e89eff0e76cded9c42379ce6a6bae995deeb20e1a6b2190d34025e2dbea2faa53a4cb69da0855155c97f2286b36781c8b092e035f806553cf69a37eebb10e22838d14c99c95872d04ed33f719bfad924b55064b50a4fcff0f17dbf6b6e8e9d84b49aaa958902a33cc6c98e577277d003babff8213b2c004004a0008004400e0000001cfca470b1b18f08eeb78825414246b21f91216637f91e53b1735ef26a015c1673622d33f83e6d2dd8799ca5e3d85b18b47589e49969b74017c92eae549e030df9f69d7de705cb7e9f38312228aa7a0e2c49bad07e9b289771e223a3c0e99ec4adef0b48b3a69be0a5a9516263fa00daa1acf0848049525dcb85c1415074faa785f550ada1607c332901a2440c739ad467b8ce56802f458b96904ea4a702a6083a637b24252bfa11c6a545ad7c99cf71850a6f0a0191a65cd04c64d2bf3809d845852917a08e9e957e1a480386249f7d3af4a6c4f1c071a81d64ef84433597872b467b36f653a07710db34dbd4f7eeacda4790b2ec6eca7a01a8c8fa4c937662ce2308e671ff86daa276b0c41ae72f92b55c299e2ac616b602b8d6c52b1989f729960ec023ab1d2ceb238405a7e302f54f0731381e8e26df842e57466373763416f16bf17518e99551375936765100b4c4a0df062c6a0a49589f594b251654a1e322457e494f1466c1787eb265355320433a2e11e62a17f4bea4cbc7d4686ba46636b146ad16677fc921732b2c12442fb56226a0ba7dc3a6b1bc585b2da3adeee4f4430497897545bbc6e00f487c77bf3f1f9b864de8c8052922e3a9975e3b20483efbdf4adba0acc44c1fd27bdfc29a247d809f0bfeb5a180089800400510008004c00", @ANYRES32=0x0, @ANYBLOB='\b\x008\x00', @ANYRES32=r2, @ANYBLOB="e82984dbfc2b6241ada770e67f0ec6597c9a00003ccd9a9b35562b750d3e14c0779da7bf714b443b046d6f3f88f74bdeaa6fc7a3bf2145bf021237892c55716eb1"], 0x3b8}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'sit0\x00', <r3=>0x0, 0x29, 0x3, 0x6, 0x3f, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x21}, 0x1, 0x10, 0xfffffff8, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6tnl0\x00', <r4=>0x0, 0x0, 0x8, 0x1f, 0x7, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7820, 0x10, 0x2, 0x4}})
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000e00)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000f00)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000f40)={0xaa8, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x634c}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0xf}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xabc}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x1, 0x9, 0x4}, {0x8001, 0xca, 0x77, 0xf9}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x7f, 0x8, 0x6}, {0x9dd7, 0x7, 0x0, 0x3}, {0x6, 0x1, 0x0, 0x7a}, {0x8001, 0x7, 0x8, 0x41}, {0x5, 0x4, 0x8, 0x77}, {0x58e4, 0x81, 0x40, 0xffffffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x46}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4062}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x8, 0x9, 0x8}, {0x4, 0x1, 0x75, 0x911ae20}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x1f, 0x0, 0x3f}, {0x1, 0x5, 0xff, 0x4}, {0x7, 0x7, 0xe2, 0xdf}, {0x0, 0x75, 0x7, 0x2000004}, {0x8000, 0x7f, 0x8, 0x7f}, {0x7, 0x40, 0x3, 0x81}, {0x1ff, 0x1, 0x2, 0x9}, {0xf000, 0x60, 0x7, 0xfffffff8}, {0x6, 0x40, 0x2, 0x400}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}]}, 0xaa8}, 0x1, 0x0, 0x0, 0x884}, 0x20000001)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000000100), 0x1)

[ 1742.766548] kworker/u4:5: attempt to access beyond end of device
[ 1742.766548] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1742.768176] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1742.769636] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:49:22 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040)={0x80, 0x1d2, 0x5, 0x5, 0x2, 0x20, 0xa1c8}, 0xc)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})

[ 1755.050367] loop2: detected capacity change from 0 to 40
04:49:22 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)

04:49:22 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1755.075700] bio_check_eod: 2 callbacks suppressed
[ 1755.075712] syz-executor.2: attempt to access beyond end of device
[ 1755.075712] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:49:22 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8002}, 0xe)

04:49:22 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1755.105531] kworker/u4:0: attempt to access beyond end of device
[ 1755.105531] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1755.107231] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1755.108459] kworker/u4:0: attempt to access beyond end of device
[ 1755.108459] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1755.110362] kworker/u4:0: attempt to access beyond end of device
[ 1755.110362] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1755.111973] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:49:22 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000900)={0x4, 0x4, {0x8000000000000, @usage=0x400, 0x0, 0xf5, 0x80d, 0x4, 0x855, 0x7f, 0x20, @struct={0xc421, 0x9}, 0x6, 0xff, [0x8, 0x4, 0x4, 0x809, 0xe70d, 0x7e10c57]}, {0x8, @struct={0x1f, 0x8}, 0x0, 0x401, 0x9, 0x4, 0xe24000000, 0x8, 0x411, @struct={0x6, 0x2}, 0xd89, 0x1, [0x0, 0x4, 0x8, 0x1f, 0x3, 0x81]}, {0x7, @usage=0x80000000, r2, 0x8, 0x3, 0x7ff, 0x7fff, 0xffffffffffffff44, 0x8, @struct={0x1, 0x80000001}, 0x3, 0x40, [0xac9c, 0x4, 0xfffffffffffffffc, 0xffff, 0xfffffffffffff001, 0x9]}, {0x10000, 0x6, 0x1}})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000000)={r2, "2996f71aad3f1f33208a6af2c54c2281"})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:49:22 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB='\x00\x00\f\t\x00\x00\x00\x00\x00\x000\x00'])
getpeername(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff}}, &(0x7f0000000100)=0x80)
sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="b8030000110000022cbd7000fbdbdf251a0000009500848047cd067c4b2c80ef823db67d60ba90f3763015f38ef5c8256b8ae2d9879f2c106a5595c2cf75dd7fd440f6a89ee29de6bacc79b133db3e4cc06ef4b8d0419dd0af775a417357ab8139396257ea165754655d82ef293cc5964f7aed12a5fbd4a0339058661e30a88b047a5ce8a6eac92bd89b73004b366678c366b7f3be4d908c91baa5e94ba821168008005e00ac1e01010000000c00708008004000e0000001e8017d8022aa5dbc6cfb8dd51da19cef3ff383d53207ae6975730cbc88f5b454625789de3f3bf904b3c55ae6aa67b3c1a713011ca785585a213897379b19ec73f9d90dcaf8220172a1cf7cb40c000a0004000000000000001d7ec8c60846cbdfa38c24a038a049d7458535e64046fe076cf4d715364db23408d9d787a55e8c15ef883a428749f95bc9d9d75e89eff0e76cded9c42379ce6a6bae995deeb20e1a6b2190d34025e2dbea2faa53a4cb69da0855155c97f2286b36781c8b092e035f806553cf69a37eebb10e22838d14c99c95872d04ed33f719bfad924b55064b50a4fcff0f17dbf6b6e8e9d84b49aaa958902a33cc6c98e577277d003babff8213b2c004004a0008004400e0000001cfca470b1b18f08eeb78825414246b21f91216637f91e53b1735ef26a015c1673622d33f83e6d2dd8799ca5e3d85b18b47589e49969b74017c92eae549e030df9f69d7de705cb7e9f38312228aa7a0e2c49bad07e9b289771e223a3c0e99ec4adef0b48b3a69be0a5a9516263fa00daa1acf0848049525dcb85c1415074faa785f550ada1607c332901a2440c739ad467b8ce56802f458b96904ea4a702a6083a637b24252bfa11c6a545ad7c99cf71850a6f0a0191a65cd04c64d2bf3809d845852917a08e9e957e1a480386249f7d3af4a6c4f1c071a81d64ef84433597872b467b36f653a07710db34dbd4f7eeacda4790b2ec6eca7a01a8c8fa4c937662ce2308e671ff86daa276b0c41ae72f92b55c299e2ac616b602b8d6c52b1989f729960ec023ab1d2ceb238405a7e302f54f0731381e8e26df842e57466373763416f16bf17518e99551375936765100b4c4a0df062c6a0a49589f594b251654a1e322457e494f1466c1787eb265355320433a2e11e62a17f4bea4cbc7d4686ba46636b146ad16677fc921732b2c12442fb56226a0ba7dc3a6b1bc585b2da3adeee4f4430497897545bbc6e00f487c77bf3f1f9b864de8c8052922e3a9975e3b20483efbdf4adba0acc44c1fd27bdfc29a247d809f0bfeb5a180089800400510008004c00", @ANYRES32=0x0, @ANYBLOB='\b\x008\x00', @ANYRES32=r2, @ANYBLOB="e82984dbfc2b6241ada770e67f0ec6597c9a00003ccd9a9b35562b750d3e14c0779da7bf714b443b046d6f3f88f74bdeaa6fc7a3bf2145bf021237892c55716eb1"], 0x3b8}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'sit0\x00', <r3=>0x0, 0x29, 0x3, 0x6, 0x3f, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x21}, 0x1, 0x10, 0xfffffff8, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6tnl0\x00', <r4=>0x0, 0x0, 0x8, 0x1f, 0x7, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7820, 0x10, 0x2, 0x4}})
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000e00)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000f00)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000f40)={0xaa8, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x634c}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0xf}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xabc}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x1, 0x9, 0x4}, {0x8001, 0xca, 0x77, 0xf9}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x7f, 0x8, 0x6}, {0x9dd7, 0x7, 0x0, 0x3}, {0x6, 0x1, 0x0, 0x7a}, {0x8001, 0x7, 0x8, 0x41}, {0x5, 0x4, 0x8, 0x77}, {0x58e4, 0x81, 0x40, 0xffffffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x46}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4062}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x8, 0x9, 0x8}, {0x4, 0x1, 0x75, 0x911ae20}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x1f, 0x0, 0x3f}, {0x1, 0x5, 0xff, 0x4}, {0x7, 0x7, 0xe2, 0xdf}, {0x0, 0x75, 0x7, 0x2000004}, {0x8000, 0x7f, 0x8, 0x7f}, {0x7, 0x40, 0x3, 0x81}, {0x1ff, 0x1, 0x2, 0x9}, {0xf000, 0x60, 0x7, 0xfffffff8}, {0x6, 0x40, 0x2, 0x400}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}]}, 0xaa8}, 0x1, 0x0, 0x0, 0x884}, 0x20000001)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)

04:49:22 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
read(r0, &(0x7f0000000000)=""/55, 0x37)

04:49:37 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:49:37 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @any, 0x3ff, 0x1}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:49:37 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @any, 0xbc56, 0x2}, 0xe)

04:49:37 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:49:37 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
syz_io_uring_setup(0x46ac, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)
syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r4, 0x0, &(0x7f0000000000)="c8d04d4ecf1ea27d79f1c7f7a65a3a13dc0153204df64d63e876b32b0662e29f1dfb3ae0d98dfb5dc4ae7e0742148efda78c3cf428fdfe34356cf1099040f3eb5548fc653908fd8894d7a001037d4a3b53c0642c8fdb2de90b1ecaf3b108b92dc4aaa787d03666d1509f163301852fbe001bdc8656d0175b7d06e483da43681026be78927a2d3e14d24699b7d6cef7f6", 0x90, 0x24000094}, 0x40)

04:49:37 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x30}, 0x0, 0x1}, 0xe)
connect$bt_l2cap(r0, &(0x7f00000024c0)={0x1f, 0x80, @none, 0x20, 0x2}, 0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)
r4 = fspick(r1, &(0x7f0000000200)='./file0\x00', 0x1)
stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700)={0x0, ""/256, <r5=>0x0, <r6=>0x0})
r7 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000070280)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r8=>0x0}], 0x5, "af2f1a9317bc6f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000004c0)={0x100000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x0, "91d80c942a1cab"})
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f00000014c0)={r9, 0x4b8})
io_submit(0x0, 0x3, &(0x7f0000000340)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x8ae, r1, &(0x7f00000000c0)="24c72589fb64b890dd6b0840192c225e0d909b1191dc765da5364998a41718b5ffc9e1b941", 0x25, 0x3, 0x0, 0x2, r2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x5, r3, &(0x7f0000000180)="dd658f8a71245e6d8d85076a8528e992ce8404f0764313d2393f9398cedf70b2668155ccdc0aefdeaa3cd8e5e4397c4c6e25cdc130", 0x35, 0x10000, 0x0, 0x6, r1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0xffff, r4, &(0x7f0000000240)="5c9adae93b7cc00bc0cdbc938cf5a8a9e3deaf861a003d2f288af54dc18b1e654496e3e13c89d18fc1e6286431d8ffe3f90fcfddad004509b77382586be7fe4a344345ea4831e5a0a36dfc6ca6011e6f560800d5c52f9a9500412e24313089610248e7449bade272afd8219bb8294bfa21285253f390d8442254a0ff0d300fb1211f5b8d3a7c665e59b957ee2a900917a13075bf37b8d085c53ab792541317df", 0xa0, 0x400, 0x0, 0x2}])
r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x268802, 0x37cacb4532d8a8c1, 0xc}, 0x18)
ioctl$FIONCLEX(r10, 0x5450)
fcntl$getownex(r1, 0x10, &(0x7f0000000080))

04:49:37 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB='\x00\x00\f\t\x00\x00\x00\x00\x00\x000\x00'])
getpeername(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff}}, &(0x7f0000000100)=0x80)
sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x008\x00', @ANYRES32=r2, @ANYBLOB="e82984dbfc2b6241ada770e67f0ec6597c9a00003ccd9a9b35562b750d3e14c0779da7bf714b443b046d6f3f88f74bdeaa6fc7a3bf2145bf021237892c55716eb1"], 0x3b8}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'sit0\x00', <r3=>0x0, 0x29, 0x3, 0x6, 0x3f, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x21}, 0x1, 0x10, 0xfffffff8, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6tnl0\x00', <r4=>0x0, 0x0, 0x8, 0x1f, 0x7, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7820, 0x10, 0x2, 0x4}})
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000e00)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000f00)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000f40)={0xaa8, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x634c}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0xf}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xabc}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x1, 0x9, 0x4}, {0x8001, 0xca, 0x77, 0xf9}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x7f, 0x8, 0x6}, {0x9dd7, 0x7, 0x0, 0x3}, {0x6, 0x1, 0x0, 0x7a}, {0x8001, 0x7, 0x8, 0x41}, {0x5, 0x4, 0x8, 0x77}, {0x58e4, 0x81, 0x40, 0xffffffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x46}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4062}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x8, 0x9, 0x8}, {0x4, 0x1, 0x75, 0x911ae20}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x1f, 0x0, 0x3f}, {0x1, 0x5, 0xff, 0x4}, {0x7, 0x7, 0xe2, 0xdf}, {0x0, 0x75, 0x7, 0x2000004}, {0x8000, 0x7f, 0x8, 0x7f}, {0x7, 0x40, 0x3, 0x81}, {0x1ff, 0x1, 0x2, 0x9}, {0xf000, 0x60, 0x7, 0xfffffff8}, {0x6, 0x40, 0x2, 0x400}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}]}, 0xaa8}, 0x1, 0x0, 0x0, 0x884}, 0x20000001)

04:49:37 executing program 1:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)

[ 1769.782556] loop2: detected capacity change from 0 to 40
04:49:37 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000003480)='pagemap\x00')
bind$bt_l2cap(r1, &(0x7f00000034c0)={0x1f, 0x180, @any, 0xe02}, 0xe)

04:49:37 executing program 1:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)

[ 1769.861966] syz-executor.2: attempt to access beyond end of device
[ 1769.861966] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
[ 1769.939481] kworker/u4:7: attempt to access beyond end of device
[ 1769.939481] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1769.940516] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1769.941282] kworker/u4:7: attempt to access beyond end of device
[ 1769.941282] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1769.942555] kworker/u4:7: attempt to access beyond end of device
[ 1769.942555] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1769.943585] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:49:37 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:49:37 executing program 7:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
r2 = signalfd(r0, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="873db6b0069df558d0e58b9522053a7a9c0d7f309cd94ac22cdfc9a1f8f263e3dad90f8cce5e9ec8c1e04308ac97b8bddb2c1ac38d44979c94e0dd5bc933c8761a6c391b8bf52cf92c5dbd7ae27a10457b7b5f4e6eb751b020eb23b63d9fc9a76f76e8327134fda793f29f6a1686be37bb2b499a18da37f2597a7b20f2ae716adf3b", 0x82}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="1edec5dc7a9e2fee19ec1a113ba6a0575098cc8aa78e10f211bed7803c7d3f7d30dc7d86aaa47c2d99c9224bec1eb188287b0bc0837528770e0555af2dbe897c284a3b509eb8ad4437b2ea56b0735219506a92efa362edb4f14273cbefb23d9d60f4de1a97898e78696da222dd027c9a5912a0ea18f875f2fce4d0b3a717021c681524647bd0f48b0bf45df2690c24385086d90f19135d4301c2ea606e2464a3f247d598a252466e6aa4e44e0278196bb501deedc965219b54eb9ae17c93d8b1d145fee465ca4e16148d0541e9925c2e71b2a8d82b751768dad477847b7f2649f075a7a46562eee067fc0aee35d902fa494d80fa6f26dbd538e86b76c33ab089d1df0d72096c787bb4641e2fdcff37f4d374fa1513b2033fb4213534596021b3ccea4f53407b6d18a665233c2224a6b43a1660d6dc38e5dcbea69adaa1cbc1cd1de93c8cf71ecff4c13e86f495732f347c44cb3080833c0ccc87a9dd83d759a6860b6b8a5ab7169f9f4343edc9ebbc03f6158a3e220999dc76e0bef93fe296fdafa7fb87666e54b36860d7bb254492aac0628c1c89aa0b2be5164f6b276da3d98d87a97d5a918b1eead826bfac81c25efa4f1bd7224764b751d9a9b3c2b9901a66d64321d37c68e28ad3ed19c6c58f3e0b679cde8cd7ea5f5ebf66158a45d7daf7a90ff685fa9c8d11d3cca002760ae3c6ca2ae2fd03eb8ae4a4c82a31010ee0efed4bf5c686a1cb8bf66702f326cafbc4ab741262670e7cec416fbfbf5db855a7b904c80eb265a55cf23c7d1c73f6107b7d9266832c1c8367a9e5530d718817c375a854ef341d9c9e3b6d63935b52c9c87bf7d210fe8c7fb5538036bd54974d12412045ceb07255f8e699e483232eaa3e539612186ba9285e77c3806b0868eddf739b35e29f3733a6982baa17f06abf79ba677ffd8fe562b8bd0f0579afc1bbf5fcb22ad437ee43ded06cffdf7a86f3431f774ce048467d605da31671ea1e2352d86ab260b0bfce24f3fc86b53f53e92d07c15b19496e65c65a869530c9e1f8542fcc17ae8163f554bcb2cf21ae7d2761d1b92909e23e9e4ffc343bc56619fd2a9b63cd354471562ec8f3cba34a6dc4e2cedb145be722f5b625d8e495ccd79b41c28fdaddb07d230af28258521c8c29085092303d251a3f79d477b8fc42bce6852222f7c8710d848071971b2c0f6cd164436f177bca0a56850ab1309d44e524a9d6ee013e897a41e3d4825d35f5496bc20c5634f8d1f027772e1bf345a4d7fb948da6d68d85834f8e82b4e6a412bda3034049786dc87bf6d94073cd76d8be87a8b5475f9dcd84a6a13eb1a578a8e33dffc12c33ae1143baca87aeefd638200dffaea9d203f6e7e6c0a44b6d012ded1539dd168cbcfa8c36afe2ec3b684c3c0391288f28c96efcd6c59e15acdac373a25ae04c55c2baac490ba327d93dc4880aaf0a4f13bb9500287676bbe0bd87c5134c467386149afcc22fd87bb5853465d49a25efae90c3c9acc8a43f9fa9250ae202dea11cb1c710dce370070d9d29f783d31746172adab32c134675792e072583b1b0051ffab4fcf129499cc91d3bf05bbfb038359d1c96954ded0ca5566740a9cf1de850684d056782539342bbee4bf124c6d565e65d774c19b3ab37663bb5537827f42902aa09ebf973d5c1572d298118ab9539ad8b65193146a30728c8a28603a087585d294c39f922746ffa10f6f57f2007fbe321673ca1646c311305e25f6095c1c23ead1e465d8424b776691bcc88d412f92cf32d33cfda8d042cd20bb6bdf8a78cb7aed0b594d4a38e5b9b7e699e0d0b218db0fe8b1a78a20654c3b8cb2a26572f5b011261851a8c2dcadbab17ecb6f9d336d46821b62b5e31f4d81d92db5b8108f7ff288f064f3a6f688b1d5f12cff64f9d15bd6498954029bb1b5058558c4050fa6878032847823ae04804501f157e3a646b0a2bba1c1440148affd32a9ac4941cbf114dbb25d1a2722e02816c5ff7c601e570105905abe55e47185341b6f7138a019df021906ca87a23223b759a1ebd9b0f2f8a5d918f01d1c3fe8ec487c21004b7e2ea24e377404b0ded4b5df1a1c6e1d86a2f0d7c7faa65447bb802d555ffccd348de6abd57b1d6ea0077ed076b4f48c2fdacc8116ac9c9340d1e0cd24d80c2a7ea077342a803dcea5ab36b055745593b5572f3467a1b373ed97e2acb40ba33d06bc812c867793f74d1b77ad3f95a2643e7d305d1888d5bb8f0e5f50343b5cec30a1704a367c77d31dbaebb6a844a76f3d6ee2e1bfb1433dc2d78405e25b80a4a5ec908bf6f7ded4326ff63a4a0fbe5fb90ef79e3283fc1a55b5196929b92d4612e3a0336d29974795e9af819495557e66bdaf2fac47bc77d11055f0d7ba98d12c253816112490e55cbeb6b87ce21ed3e2db13796099bb0a0a6d4eb7bba1971970158d3fa5aac3dc21fbe3efdbc602d9a4d2fd73088cea88cb7bc6946420913e740ed82a1bf3b99b0359f7fd73b3c5d4320629216f5bded8b3d799fe1316ef952adf6209dd3c2f6f2b525caa10bfa0c27c11b4e1749d1cc7f715d54f35eb56ea5754f9468b5742c2d34589f32c624dc9a0c0c2d7efa7a7e21d4324c3b963708448a44572a88fef7768479ba07fc70a9fbf6d9f291a7939a89e799a762f63bf947a86bc3d1aa57b0b245cc854c80b26808d57941abc5c341a60f5026bad4fbfdf85c160a0511f31a6dbd48089066d1673d82e4656267c772910c39f679224055807671292c6a2d07e5dc23d4555d19be4a765ae8c18ace655fae2078acd7c98a664156f9b9d0eae3b4f0c6ea69b61f847cc3bb75e83a6e363d9549590391d91f3fe80955a9d3fafcaa0d231b610c44ef83f89af22e861e82b104765676eac63dfa3442f3ffbe6fe110c7b314bd9fcc7e29dd0b88b09fa486f5807aac8db20fb2ee12e5fec55895deb9cbce4ff5ba3f8ed9d582cb14131bb8a7e6362ef43193f7247977ca842fd0657f99c13ab88bdef905f15256c1f351320495914b0788be1793036a1c9a95837df43d539fffa74f774eba9cb13dede29689307097c506b382d3d1e841a9240438135d89241f15fa3fe5cb62e892936cab0b52b24b4c45349571548687cd29e5f94e40c7a47ac499342b6ea48d25419d09345d1c82f90e68641d147f19583f78118b5f11c518a7bdc41b55bb3a21f8928f3f06875885fc8a80b3b7c6f14881aee895d78d63a258e9c08b19da0319259b770eb06d31970b9a56b1d679fb057895734d9d6ffe2598d7046bac6bd8fd9a6e0f88e4b32eced611648082b005e25cdd67a6b4bf7769eedfaaff1de916879400219676351591ffcd27cec757238b4faccbee47650d69308fd718870c8dbf421d5ca3f839a36b278430a7fc12f02984ea44e8296033570194e6d9af5181656b6103ef519147fdb416f5ec9d4f0567b2190fcae2cfa35de9e24e8fe0fe663b23a3260c45a9c5ba561d3fc92a228c70908ae22f850cba48bcef308b4b47172f60c36ee1e8e82a9ab6bde0dd963275387cf1504f01e36803ab76713996552adf1b811e20dc85cc9914a5b521315fc14b1413004c870e17bf5763c802981c295910f440f4cfce0785e3ad6a36fd43076e472c80543184c38fb0c9e5cd0cbf3b85d3ddf4226d151bd6ee223e46c1a524a9e77d23004ece1de5ee5b8e273cf7994051921afcf00dc209430d1e92097293ea8290ab2fba929622d6ef501f68b986aaa9d15ed0649ddbf72f6e890b5a7a0b4c2e232d24560cf64338a6ad0db284c290ce0adfc562d6ede566b383f8bfad17d9fb4a1bcebda087013d43f0ca6f696319826bc0f50010c3d4f1e107c806aa83960c8923c0ce7f6250985022301c80e480c2c38f78c1d1144206d48233f567e2adb2ddb8ab3587e7d2ea2d0c9b7a476f621a127b80c098a86fb62e4a4221d8fe4fe453947baa00a5e193548a80831af154b8c01f53fed25a5df3ecd51d8820ea533f094281bc7348cc1e17d9d9da8a68480c5061de70b47ed1f715e7f94c25177bfee5695434322ec393b33d9301fcc61c3b76bc2a88a754196f6e0f45ee2e401aee3928f18a53b01af30399386c0d8cb985f99e5b9deb29a1bc2ca1279864bffe3f1d1ffb3f63c373cf34d935773377a5bb3eab11d785dbcd549c262fbeb8671f6d35b09484da40dbc511b3a0e2d634abda1de19203d33286ce6411b72293f4b3c54e59075b0e79f463c8fa8fd59469c5b4692c1bf972eb89d5c9f71e430daa686a06abb9d8f42815d6edad318577cd4e0fb6cc093d7c859ce8df19aaea7fae217b2adc5d5063f6925205bd2a41881322f30a60da2570bbfcfed21eb4a30f8b82df9af0a460b91a174c24782064a04f4a16aeeb2a69e60dfe89fff56f0b50c2e43a5ca062c1d9b72a48684e7e4e770533fc1c0645da00cc436849d46ff3c247db303cc343399f66ac7d3871a7621887500e2f2ef7bf92d993c85d3a967b737bd3e5054ed0e0617ada6ba1faade7d4ea92dc343f8c115a3ab2960d7a9bdb9bdc5e22df3efae0f46aca29e2c4622758f8b8b18732a0a146e484e9e3a3bc1375c0b63c854d9b249af509761f837a71a83d9d85241ebea53606a962edd35509e0e198e8e18d8328f0b5232f83d7aaa3069d78734acc0e8fc6da8fc95ae56cdf9c50c8992a858aaac47ec2dfd8a988144d98318d3c1fdd6e1438e7745acdc4d5c41f20ab16cb2e5987c1544c21033a35878f4d456e13b17674fb21ebcf576e88464d0228ce5a20b251b8f82b969a6fb77bb3dcf6b5dc60fb6a496e5892ab70564dc6e9869198b0467fe15f97f3ca5789e516ff9b4f8fc21694fd5a995355fac74c6bc75a51b0eb6a085ef8aba1371420e4bc872447e4bf845e3372ef539a47d3ff4fe878458873bf3f1dce65d3a17b97a1b818d5df09c6a1350eda393827b3916872e7f2d979bcf45161d787821c10c9a02f45b0dbe1ea874e3cb13617471cdf30a77dbaa41f5d2168aad5dd3c234a8881869cd694f3640804be09c056b396620a250bae24de50e8d0a2a0a07dfbc74314472be67abc895edc4b4d26f18fcc1b09015e7fe6437bece8089caf6ee9a3583e8ad389d732c4a14411961d44404748dff0fa54f128eba69e8ad20e9801dce555955cb8f5d8979d37eda1d7454084ef669d2f06d3132cc3f1fc9b7316bcedf96a6fb9f4e76bbe21017cdf32b5a76d671468f69a8bf3ef7b31ab497e1274ba9b16968175467b1ad17806e7f7a0114265e3c8f6e3c4a9a5983c897bda3ed1e9bed8324b057e8b62738c8386173942953ddf7de8549823436608e18c12aadf8acb18b9811621d1384ecde52a35c11998844574154bffacc14b0128a85330c52ff0c9c384b2fa3131b75b1b40e357d8fee665dfa97c158fd45973cee7ec84b8dbee5bc3d792e0c57f97cc548b84443a0e3d03cb84b03315e02353e6c16daa6c017559a786839da5e9b1f2916b8983c3f3833ad772b5175a5ab55667411af5eee34de657644420ffb7b1812e542cf405e079361e2e873d80825b1bf9cc7981cd55d288972a6b26b18141fcd970f641db92b1198a1acfbf15c446e255c80035f0dcf5f762ae65ad3d6a6376539618d680fc00e818be50cf662d6b8a70327e9210c8bd18c0bfacc025a40fe2aae10d85af273685c2b9dd9d2ed1e254eb1a79e191cb7a54df1937e45a3ad763637bdf68a5a7d636e014d3c70c3b41acc590cb6cd6397c40cc995c2fbe31207e7418fbee77982e3fb13bca3b6df171d529801484d370a09f7eb58886dc3009674d082014384a446142b6b10b9cb9d1f8", 0x1000}], 0x3, 0x80000001, 0x25a8000)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, r1, 0xb, r2, 0x9)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x11450, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r3, 0x10, &(0x7f0000000000)={0x0, <r4=>0x0})
r5 = signalfd(r3, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x5, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, r4, 0xb, r5, 0x0)
setpgid(r1, r4)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r0, 0xef6)
connect$bt_l2cap(r6, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:49:37 executing program 5:
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x503, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20040000)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:49:37 executing program 1:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)

[ 1770.056984] loop2: detected capacity change from 0 to 40
04:49:37 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r1 = dup2(r0, r0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)

[ 1770.110756] syz-executor.2: attempt to access beyond end of device
[ 1770.110756] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
[ 1770.158984] kworker/u4:5: attempt to access beyond end of device
[ 1770.158984] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1770.159855] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1770.160523] kworker/u4:5: attempt to access beyond end of device
[ 1770.160523] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1770.162777] kworker/u4:5: attempt to access beyond end of device
[ 1770.162777] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1770.163676] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:49:53 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r1 = dup2(r0, r0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)

04:49:53 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x41, @none, 0x2, 0x1}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000), 0x10)

04:49:53 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x99)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x208000, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0xf8, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x3, 0x1, 0x1e}, @fd, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}}, @request_death={0x400c630e, 0x3}, @acquire, @acquire_done={0x40106309, 0x3}, @dead_binder_done, @decrefs={0x40046307, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/20, 0x14, 0x2, 0x2d}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}, @increfs_done={0x40106308, 0x1}, @increfs={0x40046304, 0x2}, @register_looper], 0x6b, 0x0, &(0x7f0000000380)="063eb2b965c0abe25273a9da4b2862656f65a76024205d62e808fb277925f0cba94301b88820b00db0ae9966c25485de3e67182c120f8fd63c3c963fee9205a79c6d16340d6131580572ad481d735cdf90e8c89aa022658d228b12daf367d5a83023149ba15cba0ef0e255"})

04:49:53 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:49:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:49:53 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB='\x00\x00\f\t\x00\x00\x00\x00\x00\x000\x00'])
getpeername(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff}}, &(0x7f0000000100)=0x80)
sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x008\x00', @ANYRES32=r2, @ANYBLOB="e82984dbfc2b6241ada770e67f0ec6597c9a00003ccd9a9b35562b750d3e14c0779da7bf714b443b046d6f3f88f74bdeaa6fc7a3bf2145bf021237892c55716eb1"], 0x3b8}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'sit0\x00', 0x0, 0x29, 0x3, 0x6, 0x3f, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x21}, 0x1, 0x10, 0xfffffff8, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6tnl0\x00', 0x0, 0x0, 0x8, 0x1f, 0x7, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7820, 0x10, 0x2, 0x4}})
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000e00)={{{@in6=@private0, @in6=@mcast1}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000f00)=0xe8)

04:49:53 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:49:53 executing program 7:
r0 = syz_io_uring_complete(0x0)
write$P9_RREMOVE(r0, &(0x7f0000000000)={0x7, 0x7b, 0x2}, 0x7)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000080)=[{0x7, 0x74, 0x81, 0x7, @time={0x5, 0x5}, {0x5, 0x4}, {0x40, 0x80}, @control={0x0, 0x200, 0xb5}}, {0x9, 0xfe, 0x3, 0x2, @tick, {0x0, 0x2}, {0x9, 0x1}, @time=@tick=0x8}, {0x1, 0x6, 0x2, 0xfb, @tick=0x3, {0x0, 0x4}, {0x8, 0x80}, @queue={0x6, {0xbc4d, 0x7fffffff}}}, {0x81, 0x19, 0x7, 0x2d, @time={0x1, 0x8}, {0x91, 0x3}, {0x6, 0x40}, @time=@tick=0x7f}], 0x70)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
fcntl$getownex(r2, 0x10, &(0x7f0000000040))

[ 1785.940788] loop2: detected capacity change from 0 to 40
04:49:53 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x4, 0x4)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:49:53 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {0x9}}, './file0\x00'})
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000040)={{r2}, {@void, @actul_num={@val=0x2d, 0x3e4, 0x6d}}})

[ 1785.994957] syz-executor.2: attempt to access beyond end of device
[ 1785.994957] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:49:53 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r1 = dup2(r0, r0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)

04:49:53 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000040))
setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0)

[ 1786.125676] kworker/u4:4: attempt to access beyond end of device
[ 1786.125676] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1786.127369] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1786.128598] kworker/u4:4: attempt to access beyond end of device
[ 1786.128598] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1786.130372] kworker/u4:4: attempt to access beyond end of device
[ 1786.130372] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1786.132089] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:49:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:49:53 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)

[ 1786.222620] loop2: detected capacity change from 0 to 40
[ 1786.273520] syz-executor.2: attempt to access beyond end of device
[ 1786.273520] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
[ 1786.338557] kworker/u4:1: attempt to access beyond end of device
[ 1786.338557] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1786.340175] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1786.341615] kworker/u4:1: attempt to access beyond end of device
[ 1786.341615] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1786.344944] kworker/u4:1: attempt to access beyond end of device
[ 1786.344944] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1786.346527] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:50:06 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:50:06 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3043}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:50:06 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x458000, 0x86)
recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/241, 0xf1}, {&(0x7f0000000200)=""/117, 0x75}, {&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/98, 0x62}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000034000000000000cf834b283eaf82f900030000009ecc11eb6b0927b59e5d97aa00e979595eb76310f9630bbf99baee58be16e6ff2f273236578f0f62858d7ae1bf76286a4f84b47fb9e74753affc70b06ff31438aa3f080f73fd394d97eccd06654c0233c58132d58ba01638477afcd0d4a1e2713728abaa50c17da5749e1286b0bfb3645a48bb97f2632878b346c165438134786b6b5a792ffa1a127f32a958f7d1a4417a9cc5e9649494eead45026bebc333c6e96cfefe645b0e695a1f4efebd97fb9b417696b484e901141d5c673bc1afbf3507cf14c7ac", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000801c0800100000000000000000020000001f8d260b089c63effb2a988742dece8be8969bed0049822675588adbdf7ab89ef2153d44c13b9fd59b4df7a58a50b123651cd432f9e430a6d30628226c05a22ff66d66dd4c7b0d6d21421800"/105, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x100}, 0x40000000)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @none, 0x80}, 0xe)

[ 1799.265805] loop2: detected capacity change from 0 to 40
04:50:06 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'veth0_vlan\x00', 0x3})
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x6, @none, 0xb19, 0x4}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100)=0x1, 0x1)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000180))
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='hsr0\x00'})
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000140))
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x71, 0x4)

04:50:06 executing program 5:
r0 = request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\\\x00', 0xfffffffffffffff8)
request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', r0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006d40)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000280)=""/177, 0xb1}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000340)=""/1, 0x1}, {&(0x7f0000000380)=""/226, 0xe2}, {&(0x7f0000000480)=""/245, 0xf5}], 0x5}}, {{&(0x7f0000000600), 0x6e, &(0x7f0000000900)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000680)=""/240, 0xf0}, {&(0x7f0000000780)=""/32, 0x20}, {&(0x7f00000007c0)=""/79, 0x4f}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000000840)=""/175, 0xaf}], 0x6, &(0x7f0000000980)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r3=>0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/3, 0x3}, {&(0x7f0000000a80)=""/86, 0x56}], 0x2, &(0x7f0000000b40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000c40)=""/186, 0xba}, {&(0x7f0000000d00)=""/170, 0xaa}, {&(0x7f0000000dc0)=""/80, 0x50}, {&(0x7f0000000e40)=""/113, 0x71}, {&(0x7f0000000ec0)=""/112, 0x70}], 0x5}}, {{&(0x7f0000000fc0)=@abs, 0x6e, &(0x7f0000004140)=[{&(0x7f0000001040)=""/152, 0x98}], 0x1, &(0x7f0000004180)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000004240), 0x6e, &(0x7f0000005380)=[{&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/158, 0x9e}], 0x2, &(0x7f00000053c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f00000054c0), 0x6e, &(0x7f0000006780)=[{&(0x7f0000005540)=""/118, 0x76}, {&(0x7f00000055c0)=""/225, 0xe1}, {&(0x7f00000056c0)=""/180, 0xb4}, {&(0x7f0000005780)=""/4096, 0x1000}], 0x4}}, {{&(0x7f00000067c0)=@abs, 0x6e, &(0x7f0000006cc0)=[{&(0x7f0000006840)=""/229, 0xe5}, {&(0x7f0000006940)=""/122, 0x7a}, {&(0x7f00000069c0)=""/208, 0xd0}, {&(0x7f0000006ac0)=""/41, 0x29}, {&(0x7f0000006b00)=""/153, 0x99}, {&(0x7f0000006bc0)=""/160, 0xa0}, {&(0x7f0000006c80)=""/13, 0xd}], 0x7}}], 0x8, 0x10000, &(0x7f0000006f40)={0x77359400})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000006f80)={0x0, 0x0, <r4=>0x0}, &(0x7f0000006fc0)=0xc)
fstat(r1, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fsetxattr$system_posix_acl(r1, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000007080)={{}, {0x1, 0x2}, [{0x2, 0x6, r2}, {0x2, 0x5, r3}, {0x2, 0x2}], {0x4, 0x6}, [{0x8, 0x2, r4}, {0x8, 0x4, 0xee00}, {0x8, 0x1, r5}], {0x10, 0x6}, {0x20, 0x1}}, 0x54, 0x3)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:50:06 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:50:06 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB='\x00\x00\f\t\x00\x00\x00\x00\x00\x000\x00'])
getpeername(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff}}, &(0x7f0000000100)=0x80)
sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="b8030000110000022cbd7000fbdbdf251a0000009500848047cd067c4b2c80ef823db67d60ba90f3763015f38ef5c8256b8ae2d9879f2c106a5595c2cf75dd7fd440f6a89ee29de6bacc79b133db3e4cc06ef4b8d0419dd0af775a417357ab8139396257ea165754655d82ef293cc5964f7aed12a5fbd4a0339058661e30a88b047a5ce8a6eac92bd89b73004b366678c366b7f3be4d908c91baa5e94ba821168008005e00ac1e01010000000c00708008004000e0000001e8017d8022aa5dbc6cfb8dd51da19cef3ff383d53207ae6975730cbc88f5b454625789de3f3bf904b3c55ae6aa67b3c1a713011ca785585a213897379b19ec73f9d90dcaf8220172a1cf7cb40c000a0004000000000000001d7ec8c60846cbdfa38c24a038a049d7458535e64046fe076cf4d715364db23408d9d787a55e8c15ef883a428749f95bc9d9d75e89eff0e76cded9c42379ce6a6bae995deeb20e1a6b2190d34025e2dbea2faa53a4cb69da0855155c97f2286b36781c8b092e035f806553cf69a37eebb10e22838d14c99c95872d04ed33f719bfad924b55064b50a4fcff0f17dbf6b6e8e9d84b49aaa958902a33cc6c98e577277d003babff8213b2c004004a0008004400e0000001cfca470b1b18f08eeb78825414246b21f91216637f91e53b1735ef26a015c1673622d33f83e6d2dd8799ca5e3d85b18b47589e49969b74017c92eae549e030df9f69d7de705cb7e9f38312228aa7a0e2c49bad07e9b289771e223a3c0e99ec4adef0b48b3a69be0a5a9516263fa00daa1acf0848049525dcb85c1415074faa785f550ada1607c332901a2440c739ad467b8ce56802f458b96904ea4a702a6083a637b24252bfa11c6a545ad7c99cf71850a6f0a0191a65cd04c64d2bf3809d845852917a08e9e957e1a480386249f7d3af4a6c4f1c071a81d64ef84433597872b467b36f653a07710db34dbd4f7eeacda4790b2ec6eca7a01a8c8fa4c937662ce2308e671ff86daa276b0c41ae72f92b55c299e2ac616b602b8d6c52b1989f729960ec023ab1d2ceb238405a7e302f54f0731381e8e26df842e57466373763416f16bf17518e99551375936765100b4c4a0df062c6a0a49589f594b251654a1e322457e494f1466c1787eb265355320433a2e11e62a17f4bea4cbc7d4686ba46636b146ad16677fc921732b2c12442fb56226a0ba7dc3a6b1bc585b2da3adeee4f4430497897545bbc6e00f487c77bf3f1f9b864de8c8052922e3a9975e3b20483efbdf4adba0acc44c1fd27bdfc29a247d809f0bfeb5a180089800400510008004c00", @ANYRES32=0x0, @ANYBLOB='\b\x008\x00', @ANYRES32=r2, @ANYBLOB="e82984dbfc2b6241ada770e67f0ec6597c9a00003ccd9a9b35562b750d3e14c0779da7bf714b443b046d6f3f88f74bdeaa6fc7a3bf2145bf021237892c55716eb1"], 0x3b8}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'sit0\x00', 0x0, 0x29, 0x3, 0x6, 0x3f, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x21}, 0x1, 0x10, 0xfffffff8, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6tnl0\x00', 0x0, 0x0, 0x8, 0x1f, 0x7, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7820, 0x10, 0x2, 0x4}})

04:50:06 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)

[ 1799.338757] syz-executor.2: attempt to access beyond end of device
[ 1799.338757] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:50:07 executing program 7:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

04:50:07 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)

04:50:07 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x5e)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x6b8a, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1913, 0x2}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)=0x4)

04:50:07 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

[ 1799.440254] kworker/u4:7: attempt to access beyond end of device
[ 1799.440254] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1799.442030] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1799.444490] kworker/u4:7: attempt to access beyond end of device
[ 1799.444490] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1799.446655] kworker/u4:7: attempt to access beyond end of device
[ 1799.446655] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1799.448413] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:50:07 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1799.551136] loop2: detected capacity change from 0 to 40
04:50:07 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5, @any, 0x4}, 0xe)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x80000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1000, 0x1}, 0xe)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x800, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x100, 0x1}, 0xe)
close_range(r0, r0, 0x2)

04:50:07 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)

04:50:07 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)

[ 1799.635711] syz-executor.2: attempt to access beyond end of device
[ 1799.635711] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
[ 1799.699055] kworker/u4:4: attempt to access beyond end of device
[ 1799.699055] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1799.700564] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1799.701613] kworker/u4:4: attempt to access beyond end of device
[ 1799.701613] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1799.703044] kworker/u4:4: attempt to access beyond end of device
[ 1799.703044] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1799.704698] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1801.737244] Bluetooth: hci3: command 0x0405 tx timeout
04:50:20 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x6, 0x1}}, './file0\x00'})
ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0xe1a}, 0xe)

04:50:20 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000000))

04:50:20 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB='\x00\x00\f\t\x00\x00\x00\x00\x00\x000\x00'])
getpeername(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff}}, &(0x7f0000000100)=0x80)
sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="b8030000110000022cbd7000fbdbdf251a0000009500848047cd067c4b2c80ef823db67d60ba90f3763015f38ef5c8256b8ae2d9879f2c106a5595c2cf75dd7fd440f6a89ee29de6bacc79b133db3e4cc06ef4b8d0419dd0af775a417357ab8139396257ea165754655d82ef293cc5964f7aed12a5fbd4a0339058661e30a88b047a5ce8a6eac92bd89b73004b366678c366b7f3be4d908c91baa5e94ba821168008005e00ac1e01010000000c00708008004000e0000001e8017d8022aa5dbc6cfb8dd51da19cef3ff383d53207ae6975730cbc88f5b454625789de3f3bf904b3c55ae6aa67b3c1a713011ca785585a213897379b19ec73f9d90dcaf8220172a1cf7cb40c000a0004000000000000001d7ec8c60846cbdfa38c24a038a049d7458535e64046fe076cf4d715364db23408d9d787a55e8c15ef883a428749f95bc9d9d75e89eff0e76cded9c42379ce6a6bae995deeb20e1a6b2190d34025e2dbea2faa53a4cb69da0855155c97f2286b36781c8b092e035f806553cf69a37eebb10e22838d14c99c95872d04ed33f719bfad924b55064b50a4fcff0f17dbf6b6e8e9d84b49aaa958902a33cc6c98e577277d003babff8213b2c004004a0008004400e0000001cfca470b1b18f08eeb78825414246b21f91216637f91e53b1735ef26a015c1673622d33f83e6d2dd8799ca5e3d85b18b47589e49969b74017c92eae549e030df9f69d7de705cb7e9f38312228aa7a0e2c49bad07e9b289771e223a3c0e99ec4adef0b48b3a69be0a5a9516263fa00daa1acf0848049525dcb85c1415074faa785f550ada1607c332901a2440c739ad467b8ce56802f458b96904ea4a702a6083a637b24252bfa11c6a545ad7c99cf71850a6f0a0191a65cd04c64d2bf3809d845852917a08e9e957e1a480386249f7d3af4a6c4f1c071a81d64ef84433597872b467b36f653a07710db34dbd4f7eeacda4790b2ec6eca7a01a8c8fa4c937662ce2308e671ff86daa276b0c41ae72f92b55c299e2ac616b602b8d6c52b1989f729960ec023ab1d2ceb238405a7e302f54f0731381e8e26df842e57466373763416f16bf17518e99551375936765100b4c4a0df062c6a0a49589f594b251654a1e322457e494f1466c1787eb265355320433a2e11e62a17f4bea4cbc7d4686ba46636b146ad16677fc921732b2c12442fb56226a0ba7dc3a6b1bc585b2da3adeee4f4430497897545bbc6e00f487c77bf3f1f9b864de8c8052922e3a9975e3b20483efbdf4adba0acc44c1fd27bdfc29a247d809f0bfeb5a180089800400510008004c00", @ANYRES32=0x0, @ANYBLOB='\b\x008\x00', @ANYRES32=r2, @ANYBLOB="e82984dbfc2b6241ada770e67f0ec6597c9a00003ccd9a9b35562b750d3e14c0779da7bf714b443b046d6f3f88f74bdeaa6fc7a3bf2145bf021237892c55716eb1"], 0x3b8}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'sit0\x00', 0x0, 0x29, 0x3, 0x6, 0x3f, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x21}, 0x1, 0x10, 0xfffffff8, 0x2}})

04:50:20 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:50:20 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0))
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000080)={&(0x7f0000000000)=""/128, 0x80, 0x7})

04:50:20 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)

04:50:20 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
fcntl$getownex(r2, 0x10, &(0x7f0000000080))
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8000, @any, 0xfffb, 0x1}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'})

04:50:20 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1813.255776] loop2: detected capacity change from 0 to 40
04:50:20 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000))
socket$inet6_udp(0xa, 0x2, 0x0)

04:50:21 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
read(r0, &(0x7f0000000180)=""/219, 0xdb)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
fcntl$addseals(r1, 0x409, 0x8)
r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
fdatasync(r2)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80005, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616ecb48902f2c7266646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=none,access=user,debug=0x00000000000083da,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])

04:50:21 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)

04:50:21 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x2, 'netdevsim0\x00', {0x10002}})

[ 1813.380621] syz-executor.2: attempt to access beyond end of device
[ 1813.380621] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
[ 1813.458667] kworker/u4:4: attempt to access beyond end of device
[ 1813.458667] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1813.460335] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1813.461846] kworker/u4:4: attempt to access beyond end of device
[ 1813.461846] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1813.464847] kworker/u4:4: attempt to access beyond end of device
[ 1813.464847] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1813.466439] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:50:21 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:50:21 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
dup2(r0, r0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)

[ 1813.568503] loop2: detected capacity change from 0 to 40
[ 1813.638346] syz-executor.2: attempt to access beyond end of device
[ 1813.638346] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:50:21 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
dup2(r0, r0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)

[ 1813.733419] kworker/u4:6: attempt to access beyond end of device
[ 1813.733419] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1813.734984] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1813.736395] kworker/u4:6: attempt to access beyond end of device
[ 1813.736395] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1813.738370] kworker/u4:6: attempt to access beyond end of device
[ 1813.738370] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1813.739900] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:50:35 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
dup2(r0, r0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)

04:50:35 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x101, @none, 0x7, 0x1}, 0xe)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:50:35 executing program 6:
ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000040))
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB='lV0'])
sendmsg$nl_netfilter(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="740000000b04010229bd7000fddbdf250700000359004c80e60e460418ca355d6ce3d048b6de075ae95a1abfc79ee62f1e2643446a49801869111faca725368de4dbe3b09c75332c8653fdb1067d62bbfb191d0643da7f9fb1d27fa14868f63511c4de7bd9d260d60ab349af4900000004005400"], 0x74}, 0x1, 0x0, 0x0, 0x4040080}, 0x4008004)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xc0de, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe)
ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000280)={r1})
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x10, 0x4)

04:50:35 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB='\x00\x00\f\t\x00\x00\x00\x00\x00\x000\x00'])
getpeername(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff}}, &(0x7f0000000100)=0x80)
sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x008\x00', @ANYRES32=r2, @ANYBLOB="e82984dbfc2b6241ada770e67f0ec6597c9a00003ccd9a9b35562b750d3e14c0779da7bf714b443b046d6f3f88f74bdeaa6fc7a3bf2145bf021237892c55716eb1"], 0x3b8}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc)

04:50:35 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @any, 0xfffc}, 0xe)

04:50:35 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, 0x0, 0x0, 0x7fffff8, 0x0)

04:50:35 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:50:35 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fed000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000000140)="da09286e42ded757c325578c138290e7ea57e12b29d3e5ccb7c76c1ef221d74aa4750e1aa3355ebca2c49a316b42a362d5f3c1c104920caa36065abdb486a8bcccae1e93e9bbb2cefba56fd076c045057bf1e465729743181e272cc6f5660c3f81ac0f13ad9becbf947ed16dbfbfb788f8baaeaf973b07a69190b4f001a80f22009f8feb8b31372278448f0ab4e824d33fac9773b3e35c358ab80d1053bacba56c0a381232e87f6d8910b72522e23a7d25708bedf5329803e7214f00fb1b8f89e84006f07619a4ece404ad902dfd1717fbb7aa6600b81920b23c44cbb08e05963085adc423", 0xe5, r0}, 0x68)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x8, 0x0, &(0x7f0000000500)=[@decrefs={0x40046307, 0x1}], 0x1e, 0x0, &(0x7f0000000680)="66f7171dfd4a60402035f429c0bbe94b0f7b5f4d5b782d1e7e2d8a75e9a4"})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r6=>r0, {0x8000000}}, './file0\x00'})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000100), 0x1)
io_submit(0x0, 0x4, &(0x7f0000000640)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x8000, r0, &(0x7f00000002c0)="fc6bd3a0e90e8788e6ae8ea6bad6a9414c56fb00ae2cc0c87bffa38755a89a0817b4b8078622d56d11280203cac9e195353b7a462d0350bbd055caa0e7e0a8078bf8b514c3aa8a8821b6edb5e2504932ec76a36ebda1e1c52e70e25bfaea50a6ab261e3cfad20e729f86c92394f5aa40bad9930036f9f6e7161d527b33effb48c240d3c6bb8a448af7b8907bb34afcdbd4361b2f9e7a9c4000a8414244d13df508f8bdd4", 0xa4, 0x9, 0x0, 0x0, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x43ae, r5, &(0x7f00000003c0)="97d4d2abc47c79b157e3c1d0c63b8bbc14f61d96aa0773e9be89fe5609dfb56ebe470ea34903e819c431c21e3c86ae5b99024cd52ad36a8a0e4da4c671bc9601939b7c4c4a7d5a7889df320e22d35a2e92af4f5e0eddd2cece5c87d77895582a01f40b20d03893c4f605e61258caccf726d8495fac3f4adb39e5e4c59b1c54b1d6eb64a6925d30f2262d805915e2c5a4871ca0fab67afc92aea61f10aef0c7611824183d51a49dea1e87957296469af01f", 0xb1, 0x8, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2, r6, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x0, r7, &(0x7f0000000580)="290ad020240d78f0c24aaaa8d5b40bc5f67f40f31e7ebc0690be403f58c183058a8c611b03286308e1f8927353a766a83a6e33ade66163dd4c198b8e209821cf118e0dbcf1239cb0555aa4a01e9f79d7540738ee74d147cdb15c75e9d2770039351737e4850fd87a8ceb22014b4c49abf0eb6340794cc1548b", 0x79, 0x5e, 0x0, 0x1}])
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000080)=0x3, 0x1)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xfffa, @any, 0x93}, 0xe)

[ 1827.898733] loop2: detected capacity change from 0 to 40
04:50:35 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
read(r1, &(0x7f0000000000)=""/225, 0xe1)

04:50:35 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup2(r0, r0)
bind$bt_l2cap(r1, 0x0, 0x0)

[ 1828.002803] syz-executor.2: attempt to access beyond end of device
[ 1828.002803] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:50:35 executing program 5:
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002700)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000000), 0x0, &(0x7f0000000180)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000000200), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000280)=""/171, 0xab}, {&(0x7f0000000340)=""/170, 0xaa}, {&(0x7f0000000400)=""/198, 0xc6}, {&(0x7f0000000500)=""/66, 0x42}, {&(0x7f0000000580)=""/164, 0xa4}, {&(0x7f0000000640)=""/166, 0xa6}, {&(0x7f0000000700)=""/143, 0x8f}, {&(0x7f00000007c0)=""/195, 0xc3}, {&(0x7f00000008c0)=""/171, 0xab}], 0x9, &(0x7f0000000a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000000b40)=@abs, 0x6e, &(0x7f0000002140)=[{&(0x7f0000000bc0)=""/190, 0xbe}, {&(0x7f0000000c80)=""/249, 0xf9}, {&(0x7f0000000d80)=""/4, 0x4}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/232, 0xe8}, {&(0x7f0000000ec0)=""/196, 0xc4}, {&(0x7f0000000fc0)=""/252, 0xfc}], 0x7, &(0x7f00000010c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000021c0)=@abs, 0x6e, &(0x7f0000002600)=[{&(0x7f0000002240)=""/172, 0xac}, {&(0x7f0000002300)=""/2, 0x2}, {&(0x7f0000002340)=""/234, 0xea}, {&(0x7f0000002440)=""/67, 0x43}, {&(0x7f00000024c0)=""/164, 0xa4}, {&(0x7f0000002580)=""/79, 0x4f}], 0x6, &(0x7f0000002680)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x4, 0x40, &(0x7f0000002800))
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
fsmount(r1, 0x1, 0x5)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:50:35 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000100))
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x3f, 0x401, 0x7, 0xff, 0x80000000})
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)=ANY=[@ANYBLOB="0700f700ff94a9c524bc12e600fde300"/32])
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x0, @none, 0x20, 0x2}, 0xe)
ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000000)="2b38bfa595c5ed8254b8f95e99916c12b7b45fca37a3d4c1d05a65f5e70f5ceb6691c73866959392f270932f2f849ff3277483f79bb3faa542fca21a91f74a409dc8aed16ba68e3264628378bfc764c1271f008bce6c9205674947eab9ffac7b50eb0380903ed0659c661f5719daca81b07bfae8648bb4e47c06ab92eeedef365e209be098123f8f6500f366d5357073ca04a78d8e35d7d5cbc9d88f2eed929727e139ac3749f44f39d185cb68174a0441cb2d891de6bf2b46cd2e77b6ebd5ef124c5445d3b206eafdb48adf89a27028873d82af66f2dca36451")
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

[ 1828.135285] kworker/u4:7: attempt to access beyond end of device
[ 1828.135285] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1828.137039] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1828.140260] kworker/u4:7: attempt to access beyond end of device
[ 1828.140260] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
04:50:35 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1828.145877] kworker/u4:7: attempt to access beyond end of device
[ 1828.145877] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1828.147414] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:50:35 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup2(r0, r0)
bind$bt_l2cap(r1, 0x0, 0x0)

04:50:35 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
getdents(r0, &(0x7f0000000040)=""/167, 0xa7)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x7ff, @any, 0x9, 0x1}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:50:35 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup2(r0, r0)
bind$bt_l2cap(r1, 0x0, 0x0)

[ 1828.342372] syz-executor.5(10493): Recompile this 32-bit application with '-D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE' or '-D_GNU_SOURCE'
04:50:36 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x7fff)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS, 0x0)
io_uring_enter(r1, 0x6c64, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
socket$unix(0x1, 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240))
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:50:36 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
r1 = accept4(r0, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80, 0x80000)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f00000000c0))

04:50:36 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup2(r0, r0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)

04:50:36 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB='\x00\x00\f\t\x00\x00\x00\x00\x00\x000\x00'])
getpeername(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff}}, &(0x7f0000000100)=0x80)
sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x008\x00', @ANYRES32=r2, @ANYBLOB="e82984dbfc2b6241ada770e67f0ec6597c9a00003ccd9a9b35562b750d3e14c0779da7bf714b443b046d6f3f88f74bdeaa6fc7a3bf2145bf021237892c55716eb1"], 0x3b8}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

04:50:36 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, 0x0, 0x0, 0x7fffff8, 0x0)

04:50:36 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5, @any, 0x1}, 0xe)
r1 = accept(r0, &(0x7f0000000000)=@caif=@util, &(0x7f0000000080)=0x80)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100), 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000100), 0x1)
r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r6, 0x10, &(0x7f0000000000)={0x0, <r7=>0x0})
r8 = signalfd(r6, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, r7, 0xb, r8, 0x9)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000340)={0x10, 0x38, 0x200, 0x70bd2d, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000001400)=[@rights={{0x30, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x20, 0x1, 0x1, [r3, r4, r1, r5]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x70, 0x9581802206689b73}, 0x40800)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r9, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000014c0)=ANY=[@ANYBLOB="0100f60009000005fb0000002d42231a2af4b73f84d959dbbe3dddf0abc0a3ae81e1675989ef1134551f9f04a1461575320f9e2bd2bb1e3ec2de0e549a1798521c86554ec183b0382510a2627a7fbe381a5c39ff7ec811815a809c1e0f327da6803ce1861d099c126a1fc7efa410a5b71841ac93b5bf0f1f8f18f0c7d7d769d94aa7f946ecee72df435ee2ac6474c2c29e4f4036f10eb9e54c57da5453346db9f9b85c44225030bdd015d00a61e2bb0658ada3695b10813c", @ANYRES32=r9, @ANYBLOB="02000000000000002e2f66696c653000a88a956da9add4fc679127cc39982daba35d40ddb7ba5b1da3a61a0d18cbb5c84fc0bb7ab211947f82a7a4348d17b9bc3cb9b1f3f5e1f7d9325f49000f7ab9e869bd165aeb541f891d68f695625220dcb94bab6498c7548cd1ea68ec747e9efe19edf2edcb37ad04cc5bb437d5c926085a3b60298f352325b958f43d72eeafccf57e4c77745d63bf27bbcc41f6f42a3fc84989654c9ed92e52e2e40a4bdda7de9239f5ae0c7b21ffcf8f29fb018297d4d8dbe509bd955d63e2652e39bcc1a511938c7939bf"])
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0x14, 0x4)

04:50:36 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000000))

04:50:36 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup2(r0, r0)
bind$bt_l2cap(r1, &(0x7f0000000040), 0xe)

04:50:36 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x4, @any, 0x8, 0x1}, 0xe)

04:50:36 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
close(r0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, 0xe)

04:50:36 executing program 5:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="040028bd7000ffdbdf254100000008000300", @ANYRES32=0x0, @ANYBLOB="08002600c81400000800a000ffff00000800a00020000000080026006c090000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000050}, 0x40400c1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000000400"/29])
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100004}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000011)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048000}, 0x8000)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:50:51 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, 0x0, 0x0, 0x7fffff8, 0x0)

04:50:51 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB='\x00\x00\f\t\x00\x00\x00\x00\x00\x000\x00'])
getpeername(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff}}, &(0x7f0000000100)=0x80)
sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x008\x00', @ANYRES32=r2, @ANYBLOB="e82984dbfc2b6241ada770e67f0ec6597c9a00003ccd9a9b35562b750d3e14c0779da7bf714b443b046d6f3f88f74bdeaa6fc7a3bf2145bf021237892c55716eb1"], 0x3b8}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

04:50:51 executing program 7:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x2a6174ef5d4f510e)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)=0x80000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
r4 = signalfd(r2, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, r3, 0xb, r4, 0x9)
r5 = perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r5, 0x10, &(0x7f0000000000)={0x0, <r6=>0x0})
r7 = signalfd(r5, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, r6, 0xb, r7, 0x9)
clone3(&(0x7f0000000140)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x18}, 0xfffffffffffffffe, 0x0, &(0x7f00000000c0)=""/31, &(0x7f0000000100)=[0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0x0], 0x6}, 0x58)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)={0x7, 0x7ff, 0x0, 0xe8, 0x2, 0x5, 0xfffd}, 0xc)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:50:51 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:50:51 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000001000)={{r1}, "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"})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:50:51 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:50:51 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100), 0x1)
readahead(r1, 0xcd6, 0x10001)

04:50:51 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @any, 0x7f, 0x2}, 0xe)

[ 1843.765680] loop2: detected capacity change from 0 to 40
04:50:51 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xa20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x2}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

[ 1843.832946] syz-executor.2: attempt to access beyond end of device
[ 1843.832946] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:50:51 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x3ff, @any, 0x5}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

[ 1843.910147] kworker/u4:6: attempt to access beyond end of device
[ 1843.910147] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1843.910982] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1843.911724] kworker/u4:6: attempt to access beyond end of device
[ 1843.911724] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1843.912570] kworker/u4:6: attempt to access beyond end of device
[ 1843.912570] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1843.913348] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:50:51 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:50:51 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000000))

04:50:51 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
ioctl$SCSI_IOCTL_SYNC(r2, 0x4)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]})

[ 1843.992286] loop2: detected capacity change from 0 to 40
[ 1844.022433] syz-executor.2: attempt to access beyond end of device
[ 1844.022433] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:50:51 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

[ 1844.070497] kworker/u4:11: attempt to access beyond end of device
[ 1844.070497] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1844.071396] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1844.072020] kworker/u4:11: attempt to access beyond end of device
[ 1844.072020] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1844.072954] kworker/u4:11: attempt to access beyond end of device
[ 1844.072954] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1844.073758] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:50:51 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000104000018000000", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
write$P9_RCREATE(r0, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x10, 0x4, 0x8}, 0x400001ff}}, 0x18)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x8, 0x2, 0x1}}, 0x14)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0)

04:50:51 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:50:52 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380), 0x0, 0x7fffff8, 0x0)

[ 1844.972822] syz-executor.2 (10577) used greatest stack depth: 22896 bytes left
04:51:05 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x42)
ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
openat(r1, &(0x7f0000000000)='./file0\x00', 0x8201, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:51:05 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00\x00\f\t\x00\x00\x00\x00\x00\x000\x00'])
getpeername(r0, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

04:51:05 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:51:05 executing program 6:
sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x8, 0x4)

04:51:05 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380), 0x0, 0x7fffff8, 0x0)

04:51:05 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:51:05 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x9}, 0xe)

[ 1858.081901] loop2: detected capacity change from 0 to 40
04:51:05 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x6, @none, 0x5, 0x1}, 0xe)
connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0xfff, @none, 0x9, 0x2}, 0xe)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x200, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x1}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1ff, @any, 0xc6, 0x2}, 0xe)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0xf36219ef57fb284b, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x100, @none, 0x1, 0x2}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x4, @none, 0x8007, 0x3}, 0xe)

04:51:05 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1001)
r3 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x20, 0x3, 0x2d, 0x56, 0x0, 0x81, 0x93c04, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f00000000c0), 0x8}, 0x10, 0x10000, 0x4, 0x9, 0x3, 0x1, 0x5, 0x0, 0x7, 0x0, 0x8}, 0xffffffffffffffff, 0x0, r2, 0x3)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001200)={{r4}, 0x0, 0x2, @inherit={0x98, &(0x7f0000001140)=ANY=[]}, @subvolid=0x3ff})
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x1, 0x8, 0x40, 0x0, 0xfffffffffffffffd, 0x4000, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x3fa0, 0x8000}, 0x4082, 0xffff, 0x0, 0x3, 0xffffffff, 0x1, 0x9, 0x0, 0x7, 0x0, 0x5}, 0x0, 0x10, r3, 0x2)
sendfile(r4, r0, &(0x7f0000000080)=0x1, 0x3)
connect(r0, &(0x7f0000000000)=@hci={0x1f, 0x1}, 0x80)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

[ 1858.172682] syz-executor.2: attempt to access beyond end of device
[ 1858.172682] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:51:05 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
openat(r1, &(0x7f0000000000)='./file0\x00', 0x103000, 0x110)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:51:05 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1858.248480] kworker/u4:6: attempt to access beyond end of device
[ 1858.248480] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1858.250326] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1858.253617] kworker/u4:6: attempt to access beyond end of device
[ 1858.253617] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1858.257662] kworker/u4:6: attempt to access beyond end of device
[ 1858.257662] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1858.259437] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1858.352687] loop2: detected capacity change from 0 to 40
04:51:06 executing program 6:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r2}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={@private2, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x3, 0x1ff, 0x400, 0x0, 0x400, 0x80, r3})
r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setlease(r4, 0x400, 0x2)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd6a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x8d4)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r6=>r5, {0x0, 0xee01}}, './file0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000180))
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100), 0x1)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r7}}, './file0\x00'})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, 0x0, 0x0)

[ 1858.401440] syz-executor.2: attempt to access beyond end of device
[ 1858.401440] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
[ 1858.441171] kworker/u4:6: attempt to access beyond end of device
[ 1858.441171] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1858.441997] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1858.442615] kworker/u4:6: attempt to access beyond end of device
[ 1858.442615] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1858.443574] kworker/u4:6: attempt to access beyond end of device
[ 1858.443574] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1858.444388] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:51:06 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1858.499002] loop2: detected capacity change from 0 to 40
[ 1858.548589] syz-executor.2: attempt to access beyond end of device
[ 1858.548589] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
[ 1858.609825] kworker/u4:6: attempt to access beyond end of device
[ 1858.609825] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1858.610755] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1858.611811] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:51:06 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1858.641670] loop2: detected capacity change from 0 to 40
04:51:06 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x401, 0x340400)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000040)=""/105, &(0x7f00000000c0)=0x69)

[ 1858.716704] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1858.717498] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:51:06 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1858.748964] loop2: detected capacity change from 0 to 40
[ 1858.797669] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1858.798445] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1860.169185] Bluetooth: hci3: command 0x0405 tx timeout
[ 1870.766927] loop2: detected capacity change from 0 to 40
04:51:18 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xec7}, 0xe)

04:51:18 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
accept4$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:51:18 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0)
socketpair(0xb, 0x80000, 0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x40)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x1}, 0xe)

04:51:18 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:51:18 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
getpeername(r0, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

04:51:18 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380), 0x0, 0x7fffff8, 0x0)

04:51:18 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x20, r1, 0x750ca6f759fdc64b, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000008c0)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x28, r3, 0x303, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000082}, 0x4401)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000180)={'tunl0\x00', <r7=>0x0, 0x10, 0x1, 0x1, 0x4, {{0x1e, 0x4, 0x3, 0x8, 0x78, 0x68, 0x0, 0xaf, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp_addr={0x44, 0x2c, 0xd6, 0x1, 0x8, [{@rand_addr=0x64010101, 0x1ff}, {@rand_addr=0x64010101, 0xb6}, {@local, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@local, 0x80}]}, @generic={0x83, 0xe, "483e0d9135488e8cc16d1c6e"}, @rr={0x7, 0x27, 0x7d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @broadcast, @local, @loopback, @private=0xa010101, @local, @empty, @empty]}, @noop, @noop]}}}}})
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000040)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r10=>0x0})
sendto$packet(r8, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r10}, 0xc)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x100, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x8180)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r11, 0x6, 0x2, 0x0, &(0x7f0000001100))

[ 1870.819564] bio_check_eod: 10 callbacks suppressed
[ 1870.819579] syz-executor.2: attempt to access beyond end of device
[ 1870.819579] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
[ 1870.863909] kworker/u4:1: attempt to access beyond end of device
[ 1870.863909] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1870.865810] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1870.868747] kworker/u4:1: attempt to access beyond end of device
[ 1870.868747] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
[ 1870.873163] kworker/u4:1: attempt to access beyond end of device
[ 1870.873163] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1870.874840] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:51:18 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:51:18 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
r2 = dup2(r1, r1)
fcntl$setlease(r2, 0x400, 0x1)
ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'veth0_virt_wifi\x00'})

04:51:18 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80100)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'bond0\x00'})

[ 1871.019933] loop2: detected capacity change from 0 to 40
04:51:18 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000))
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
flock(r0, 0x1)

[ 1871.086189] syz-executor.2: attempt to access beyond end of device
[ 1871.086189] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:51:18 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
fcntl$getown(r0, 0x9)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, 0x0, &(0x7f0000000080)=0xffe1)

04:51:18 executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x124c0, 0x12)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000000)=0xfffffffffffffe4b)

[ 1871.211659] kworker/u4:11: attempt to access beyond end of device
[ 1871.211659] loop2: rw=1, sector=56, nr_sectors = 4 limit=40
[ 1871.213180] Buffer I/O error on dev loop2, logical block 14, lost async page write
[ 1871.214647] kworker/u4:11: attempt to access beyond end of device
[ 1871.214647] loop2: rw=1, sector=60, nr_sectors = 64 limit=40
04:51:18 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1871.219310] kworker/u4:11: attempt to access beyond end of device
[ 1871.219310] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1871.220950] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:51:18 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r0, &(0x7f00000005c0)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14)
r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f00000001c0)='./file0\x00')
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
sendmmsg(r0, &(0x7f00000000c0), 0x45d, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000000000)={0x1, 0x100, 0xf2})

04:51:19 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000b40)={'wlan0\x00', 0x101})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000100)=""/188, 0xbc}, {&(0x7f00000001c0)=""/180, 0xb4}, {&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000000340)=""/179, 0xb3}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/179, 0xb3}, {&(0x7f0000000500)=""/36, 0x24}], 0x8, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [<r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)=""/123, 0x7b}, {&(0x7f0000000800)=""/96, 0x60}], 0x2, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}], 0x2, 0x21, &(0x7f0000000a80)={0x0, 0x3938700})
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
setsockopt$sock_int(r5, 0x1, 0x34, &(0x7f0000000380), 0x4)
pread64(r4, &(0x7f0000000bc0)=""/132, 0x84, 0x7fff)
connect$bt_l2cap(r2, &(0x7f0000000b80)={0x1f, 0xa86, @any, 0x1}, 0xe)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000000, &(0x7f0000000c80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="acc8296ced9c7766646e6f3d", @ANYRESHEX=r0, @ANYBLOB="2c6163636573733d636c69656e742c63616368657461673d402c2e5c3a2e5c24257b2b404027ad212c6d6d61702c6163636573733d757365722c61756469742c00"])

04:51:31 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x7, @none, 0x0, 0x1}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:51:31 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
connect$bt_l2cap(r3, &(0x7f00000001c0)={0x1f, 0x5, @none}, 0xe)
r4 = accept4$packet(r3, &(0x7f0000000300), &(0x7f0000000340)=0x14, 0x80000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r6=>r0}, './file0\x00'})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000100), 0x1)
r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r9, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
io_submit(0x0, 0x7, &(0x7f0000000880)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="88858622a260ce8d9fe58e2402758def0677100006cb2f143cf7aa1ad142c507a2b1284003d13df9d7baa1c733398e695b65398e657d50144c198f0f271a39d13b3ce8984e92cc37b41bfabef45bb4bffe82b319d4e613a2aa1e2ef9a1977fd58f6f88673872611e09f543ba5eb15e584997c11933876a5f1243f0c97cdecf414aea78c92e92c5a3ce2810d742ddb4b8d30c17916311c32fd01176974d2b55b995fa4b959e56cf48f33cf5d142312737779daf9272", 0xb5, 0x80, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x439, r1, &(0x7f0000000180)="30bcc6e6c0a648dc", 0x8, 0x8}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x0, r4, &(0x7f0000000380)="767b20814531858f8e46fd327115587376e91b62ea3118d9707716de99f6cf48caab84217e162680708bff1280b7007a033e091895393b0d98e2ebeabd", 0x3d, 0x6554c7a4, 0x0, 0x0, r5}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x8, 0x5, r2, &(0x7f0000000400)="287e78847ddf75a1cbb98db3cfd45ddb6cc3ae0f8665e0ef5a64f5c776d18bd29a8e2b31bdf07aa7eb52f9dd7592f5f15359ce351969fdade28bd0b09e9ccfeaae8e1b68daedf8b4ebd909054a94f08e600cfd3950b182ea472a3fd5c25222c0fb8b784e835afd05f58e6da965be8d8bac166bb9ee292bdb32dc041037b267c25875ffdd4257d9a4b20cc31bc6236d32b43f45a349596ad0832b60f24ed1bd65856767ce9989805cff00026c180284", 0xaf, 0xfffffffffffffff9, 0x0, 0x1, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x2, r7, &(0x7f0000000540)="b6247467a0ca5c2035cec220b7c1576b507546e96912069ed0a5bad49d2107c53493a374426058325e78ddb755f63d65d02cc84bbbfd009bd33bb879d9175927fc7a12f0c33571d9a34277c47d116f49d96bd2323636eee0123a607bf954887315346c82e39eb7e391eb7b2dbf12cfe36d03c7fada3cc914097bcf0395157bceb7d615037e6feea891993aa4af8e479e6563154efe727cf75668077fd7533b4e234840666b304d3cd541b5c4e72878819d6236937e05c59c84c84ca42b2360c61f713e81d8368bfac1eb8136602eaf6a4e03d3c4873ab6e5a0764d164ada826287110209709d5ad272ec768a5060fa", 0xef, 0x1, 0x0, 0x0, r3}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0xff, r8, &(0x7f00000006c0)="3d470198fa4c35ec3b33873138cf7e77cadc4e02223ac3496894982ae2c8b9c393a4c08cfb05c7310cf4cdf3deb4b4c38f35f20cc4d58aeb452c590143e9a51464fd040ac18bd0db643434d4f1e05a85bd3dc3bb012ee04a8730b17e482b2b11e405b23860d342a81c706b19f1f1f170798c0b7bcccf047551597445fa92f9d63b823be92b9a1235b61914112452edd6f35dcd599b91322c57d319a763608c18c49fe4c5c5", 0xa5, 0x8, 0x0, 0x1, r3}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x5, r1, &(0x7f00000007c0)="9426079e4971738429a66de30a13ee2b08562370761383c079c4a4fd6b3415511901eb34f28fd0447811a530f311508a4ccd10928ccdc87021e4f1030fd7700d5922b14048ca88ad25607562db008cbfc8fc94", 0x53, 0xb7de, 0x0, 0x2, r9}])
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x400, @none, 0x3, 0x2}, 0xe)

04:51:31 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getpeername(r0, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

04:51:31 executing program 7:
shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/23)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000dcf49115bc6197b00f15356fa09ce6493bb8519889aaf710b0c78926958f1b298000df74740a0fb46576c7e20a20ede25c33753908ea75b87c7af56a633cc991e4bd95ea4c0cb2d02fa7ea717774f4f7f2b71acc4b03c277bbe1acd225b517e15f87f4a7ed8102a7ce2d53f7f55ce404f2fca79f50097c9811b501f211592f2e639b2d745c04", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="05000000010080002e2f26696c653000"])
bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x81, @any, 0x6}, 0xe)
r2 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffc000/0x1000)=nil)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r2, 0x0)

04:51:31 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{0x0}], 0x1, 0x7fffff8, 0x0)

04:51:31 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
sendfile(0xffffffffffffffff, r1, &(0x7f0000000000)=0x1, 0x3)

04:51:31 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:51:31 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getpeername(r0, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

[ 1884.153490] loop2: detected capacity change from 0 to 40
04:51:31 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x48, 0x4)
r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x10, 0x80800)
ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000180)='veth0_to_bond\x00')
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000001c0)=0x7ff, 0x4)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x6, 0x4, 0x1f, 0x3}, {0x1, 0x80, 0xa7, 0x5e}, {0x4, 0x1f, 0x3, 0x9}, {0x7, 0x3, 0xc, 0xf0000000}, {0x100, 0x7, 0x1, 0xb6c6}, {0x8, 0x5, 0x0, 0x800000}, {0x8, 0x2, 0xf8, 0x4}]}, 0x10)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:51:31 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getpeername(r0, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

04:51:31 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1884.246060] kworker/u4:11: attempt to access beyond end of device
[ 1884.246060] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1884.247874] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1884.417492] loop2: detected capacity change from 0 to 40
[ 1884.488813] kworker/u4:6: attempt to access beyond end of device
[ 1884.488813] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1884.490742] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:51:46 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{0x0}], 0x1, 0x7fffff8, 0x0)

04:51:46 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))

04:51:46 executing program 7:
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8004)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:51:46 executing program 3:
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

04:51:46 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:51:46 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000))
openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'wg0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x20, 0x5, "336173a4ff"}})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYRESHEX=r2])

04:51:46 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1899.226329] loop2: detected capacity change from 0 to 40
04:51:46 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

04:51:46 executing program 3:
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

04:51:47 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1899.419186] kworker/u4:1: attempt to access beyond end of device
[ 1899.419186] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1899.420825] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:51:47 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x3, @any, 0x8}, 0xe)
r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40)
ioctl$FICLONE(r0, 0x40049409, r0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
r2 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7e, 0x244400)
openat(r2, &(0x7f0000000280)='./file0\x00', 0x501401, 0x1c)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)
getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000100)=""/135, &(0x7f00000001c0)=0x87)

04:51:47 executing program 3:
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

[ 1899.536541] loop2: detected capacity change from 0 to 40
[ 1899.722933] kworker/u4:1: attempt to access beyond end of device
[ 1899.722933] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1899.724699] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:52:01 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40)

04:52:01 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000), 0x10)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:52:01 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xfffffffffffffe96)

04:52:01 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x70}}, './file0\x00'})
syz_io_uring_setup(0x46ac, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_setup(0x31e, &(0x7f0000000280)={0x0, 0x8ad, 0x10, 0x2, 0xb1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0)
sendfile(r0, r0, 0x0, 0x6)
syz_io_uring_setup(0x10bc, &(0x7f0000000080)={0x0, 0xdb51, 0x10, 0x1, 0x126, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r2, r5, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x1}, 0x7)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x6, @none, 0x8001, 0x1}, 0xe)

04:52:01 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:52:01 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{0x0}], 0x1, 0x7fffff8, 0x0)

04:52:01 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
getpeername(r0, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

[ 1913.731912] loop2: detected capacity change from 0 to 40
04:52:01 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:52:01 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x1a, 0x4)

04:52:01 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
getpeername(r0, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

04:52:01 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x1, 0x1, 0x6, 0x6, 0xedf1, 0xfffffffffffffff8}, {0x1, 0x0, 0x4, 0x0, 0x3, 0x5}], ['\x00', '\x00']})
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x23, 0x4)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0xc)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x5, @any, 0x3, 0x1}, 0xe)
ioctl$sock_netdev_private(r1, 0x89f0, &(0x7f0000000140)="7d40c6150aa10d1a4cd64f1e132b4f849ddbd9a6cac66274883badbd5767e04b2eb254665d60ada8b9316190ac25ef78f5c6e84545928d1eabf7038804d17595cbb768c89c9fd17087a128cf9b95296f88b2c6bb5509dfe13252a917fe3810ffc80070d7aa2c4cc8abd4d51abc20c817b7d69be87e6bcedbf5ddbd6baa6784544cefa26b1b3335814781e1aae28f051a9dc350")
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000000)={{0x0, 0x5d, 0xfffffffffffffff7, 0xa8c4, 0x5, 0xd13b, 0x5, 0xfff, 0x9, 0x3ff, 0x2, 0x4, 0xf9, 0x194, 0x2}})

04:52:01 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x8000, @none, 0x0, 0x1}, 0xe)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/tracepoint', 0x0, 0x2)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x79, 0x4)

04:52:01 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x2}}, './file0\x00'})
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x7ff, @none, 0xec}, 0xe)

04:52:01 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x513}}, './file0\x00'})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x7, 0x80000001}}, './file0\x00'})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, 0x0)

04:52:01 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1913.943499] kworker/u4:2: attempt to access beyond end of device
[ 1913.943499] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1913.945471] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1913.997162] loop2: detected capacity change from 0 to 40
[ 1914.078277] kworker/u4:11: attempt to access beyond end of device
[ 1914.078277] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1914.079975] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:52:17 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:52:17 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
getpeername(r0, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

04:52:17 executing program 6:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = dup(r0)
connect$netlink(r1, &(0x7f0000000080)=@unspec, 0x6)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000240)=ANY=[@ANYBLOB="000000eaff000000ff0f00003342f915000000000000010000000000000000003f4191071e3ef1f4d7a8cc64124a4ae0cc57f273893c7aa68233c8e7b9beb905e479a4994f8882e74d469b67a0e38f7239b6c539780658e5deac1b4dd4dc7ba630f27783e05f67f8b8fb1be20c33c0ad5c323d119a15ff52f19ae012ca0550e44858063f0e5e1da010934cc43ef62ab1426b02193d8c120f030d75f3365fbfc52501a76b4c95f6af956ad4d138938fd844d3ce049de8a49f64bb021b193e6529f7151c0e8cfdf9f4ac0000"])
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4c8000, 0x140)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000400"/32])
r5 = openat(r4, &(0x7f00000000c0)='./file0\x00', 0x3c447, 0xd1)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0)
epoll_wait(r5, &(0x7f0000000180)=[{}], 0x1, 0x5)

04:52:17 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000000))

[ 1929.564931] loop2: detected capacity change from 0 to 40
04:52:17 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)}], 0x1, 0x7fffff8, 0x0)

04:52:17 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)

04:52:17 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x7, @any, 0x8, 0x1}, 0xe)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, r1, 0xb, r2, 0x9)
r3 = gettid()
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0x0, r4, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000100), 0x1)
r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r7 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r7, 0x10, &(0x7f0000000000)={0x0, <r8=>0x0})
r9 = signalfd(r7, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, r8, 0xb, r9, 0x9)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000400)={{0x2, 0x0, 0x0, 0x0, r10, 0x1, 0x2}, 0x2, 0xab9c, 0x0, 0x0, 0x0, 0x0, 0x1ff})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004e40)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000200)={0x15e8, 0x15, 0x800, 0x70bd29, 0x25dfdbfd, "", [@typed={0xc, 0x8b, 0x0, 0x0, @u64=0x40}, @generic="b0d0a27256a0f3d0ab77a82f36629a9cd7ea4c64d276c93ce931f673ae5478618aeb464d1146e846bcf469cbde27b3a42aa87659b6c067132a63e562cec5e8f306100375754f4d3f7ed9dc00437c815cc5bced6601d56f92df8f6bc6325c5351810fa8ca0edaf85652109a754bf72e7bfad8edd220ef042bd692d69307074c1b8b45663d51cd70b1e98d52dc663dc0d557c161ed428fe00b054cace32fe55ab83cc06deee6c6", @nested={0xc, 0x1f, 0x0, 0x1, [@typed={0x8, 0x7f, 0x0, 0x0, @uid=0xee01}]}, @generic="9c36e3941dc820617844d4b980ad56e96bb1009dc2e54f89fa8a2a0f7df2cb6d9bdf6b38a0d873390ace74db6d06790663f82e2fa60fb577f15b2a1c9e0350b14ce2e1604af7d327d81e8590376b37fa2d1742ee9a8abdffb36d87a1719803a9739a9f7a17d5b376aa51819b061d787b02a3fc1a1b47948d7fa4d188f30b4857d93ae15ad16fa7e0d0905532f556231b355e9ad6f374d4cdd8d6f96e51f80013c2b1b82641c5ad519d9f5d9c96dbdc8b726bde35877cd023f45ec20b666079591513e452ee", @generic="8eca487f5873d81694a097b787f6fbb666f77e75c8b7960e492e806d13ce51fc642176331c48116365a6", @generic="d0660941cb5b18bde91c08657638c344dbbc52138df578b58797eded57da84f05ac039100d216127f944cda381272486b53f36fb7249d0c26715f3c5e7d71e69c79822f8e7b1b90430ba11ebd7157784952b4eeca84c08cabcdf95ae58d1d03fc132383720c85292ebdb4aa9ac7df3be68002334129bb90eeb69", @nested={0x11f8, 0x64, 0x0, 0x1, [@generic="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", @generic="8deb910de69ee2191275b7cf308d46a07cf5592c00ba08ef688c484cef21e72d8ae71d7352a985fa9dc43875ba7a56dfaa549b3793dd3e2c691fa47942facfe2b9364035d25869684f9fb1252fe227ec7df8d88245d2048adc343db002753e615df22b976b13cd38ac7c773a96fe5cce752512c92096068e2a4bf5a18462904686160722c587ee01898a01c06e838587fff105b94b19565dd5e281842b667f1a186dc09e6581e06ad556a68797c9b79ef5cbcf0ab80cca2dc194fdff79c99de6bc4785e3dd30761761d7e864fdf88f027a9c910f", @generic="1a2c4a52d54d9e124bb6a79463b647a920ea09bbf834cc8476e31832fc1ce802a4007b1e66a0819e142626b0ddb187a6b7e6f36afc1277febc11017d9937bc1b9f3f6cdd8b604a4b298af5cb9d6e31e5e33a72868ecd8d8337bbb8326de364ac82553a93dd3f79dc2064bbefb618a76ccaa2117fa1ecacff57e342d17d4bef5bea9634ef2e41e8c371e8de4e80beeec14f6497dab3eb26e500e4033127bdd0794d4951503489dd2d26f2", @typed={0x8, 0x5d, 0x0, 0x0, @ipv4=@local}, @generic="d89f46d2dc694c3bb6ae9490e56c400df69da61eb06b5926d8ae3ac71ec7298181bdfb351a1459d0c0a0", @typed={0xc, 0x1d, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x91, 0x0, 0x0, @pid}, @generic="8144cb729741db648a1da4c23f27d095ff745badfad70da9e4b665493966e66b43a7182e75f1abf087e4cb594cb17c73"]}, @nested={0x18c, 0x59, 0x0, 0x1, [@typed={0x5, 0x59, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x20, 0x0, 0x0, @ipv6=@remote}, @generic="96a8d0fa0f23cc660a710fae9dd93f0414828b8210cee1b7079d46e046da1ccd595d57b0813282c968bf49ca456525efa792fafa54eaf704f1d9433f0429fa9648f6af8395957f1d2bc6ff5fc578a7200bb13297f272935ee87a8d161a37c87da9c91192eab9e9fd3ea79f24660f1fb4aa235339ddff7d781422711c7980071450f18de21a60ce2c890af78207b369ffe63f5a81878d1a00cc35e7d3841e46b23050ac4d", @generic="8f54e7b5c2ce37a7554f3d41749c7e9fd77141a16ebfe0aa51c439ebf27cfa1943568c6ba3685b070d5b0c5bf5eaacbf88317c9f2da4e5029a33f38731ab", @generic="70c200ed6475f2", @generic="a03d34da6d339c9ab1ec8044da0e2b084749c23790eb7dd29e5142602c4056498988aa39d280a6b899dc950f0edf0078dab94d3094f41439c4687bd97171c345cc0a2dbd386a35e248033d701944722a5e9417686b3ec84a5f204d5ff4f4cb90920897d77e68f1b6d11e4a093f5c4aeea96ebc6f7af02c822782748ed69f578588d29a"]}, @generic="78b2fcba07306e38cf271442188e2f3addf53c43993168e826ce6aa6edf45b9ef37bd871872142f5b926f1672a"]}, 0x15e8}, {&(0x7f0000001800)={0x2458, 0x38, 0x200, 0x70bd2a, 0x25dfdbff, "", [@generic="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", @nested={0x16a, 0xb, 0x0, 0x1, [@typed={0x8, 0x4e, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="6c65ed7d5f8104faf3a8fe098d18b8919e", @typed={0xc, 0x56, 0x0, 0x0, @u64=0x1}, @generic="5af37c30f18416698e40029764dd3a24d7907e9c7eed43f5d53c4a5644d2ac403ab9de36a7e00d136b8f43be631a61d551d79f8af3aa1f294aa28a389f3600cd3a8b959fd0b96e", @generic="de738f3d7c9a9a184461a0df2fffac1376ae48a676651af8d15e0ed0561e14186f835ad75504586aa563a2c58a60ebc51df06b28541bf5097a0ff858ea0026", @generic="66671fd24ea7b333a6985590b3a458b5af4183cf34d2ede7abd668fdec948247a9c2824f136e5f09a8e5800eb7d63c2d846c83a4613721a3208ba2b4c23d2c60b7208077a9fac14a38d06e2f617e6e89c700c1ccd1ccc1dfa989d095c123c37fbbd307266fade236e9db8267bf6c7320c562622bd3caf5f1223b85c046de3483833c28b5ddd191afc7e7888f81689c2035dea68b9dc5708cddf7f2a160146787f5a1013c967da69f8a175917f6632a9fd022ef", @typed={0x8, 0x43, 0x0, 0x0, @u32=0x5}]}, @generic="8115bd81a82105eb3fcfe98dda8e2a0ea29aac0163d840503416d3ede15e7dbf5cfa16132795416ce8d0316febf4a4f08603ccc13e165d17da0152baa1af05751856a1d14d14459c273a37cae28ee5e41fee710593c3ba2204c29eae9adfc14ada15ae079dee61c5011e4227f9f05716817d466e7863a32dce54ead06c17cc40b65fba001f8ed799eff6324289f627a1ca6452bc4382bef844c4b22fafbbf9b8c59be1f730944770e25140916862c3d54762f6658aab4cf00973f09db7", @nested={0x10b8, 0x24, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0xe}, @generic="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", @generic="e3278c399b995f1cb10b8ce60f826193e0f0d70296ea9dc1f8e7c673e50bacdde56e5098c5b926c9f1f02dd4c56cc1b88ea720dcd55a22755ed9278f59c5", @generic="8b3c5fe4b4eae59c0d98b6d23a99f43f9098fb13765f50898e232c2e1a28fa8afaf7015ad6db3d1b985a0331f3ca01efba2249ce3997a530578d21330e1ef739e038fab198e2fa854e74749e2d45b76d3a990999b9e041c9eb93fc433946c9a8192cc71bbbce8f6f1123"]}, @nested={0x162, 0x96, 0x0, 0x1, [@generic="b964a4bf801759c84439b3dd2832f23f00c5519066e9038575dd7d5a74b62b436b83253a27e1ed45250ca015110fc929f9f50701576c4c6445eea5bdd26f764ac36a10345d0e87584055f6074bd0", @generic="e2a9cbdfae13f59a576b63a34db898e327eb2c0f232b215a3030cce3bf2f3a3639b1a06e596675a1cb790377b13b20d76ac209bc840f4c0afe5f44dc3c3e14988b855ba743ef5e3181babfd2f80330480b3c482763d2b7a242a78f391ec47f961f2c8db76295e23006e9f3d102847ac63298c675154617c0bfaf6f8a3365e7960e66eaefbb15175597ce452c7f3b118704509ad13edd063d570f8feb806f6b337eac9205074058756357ae12d9d2497c5f6a5f3131734f1949a8e17040e3164f2b4e6a605961246fb3ae6a56db4e83f04f2eebb1cffdce5f0c67c7f3aa02ec9a221e8a1a6ec31480e8e29ac4b7d3b042c8cc03dcf837dc3ba2", @generic, @generic="d8dc71aa9baa8380444855b11a7602cad6aedc6f0bcf70"]}]}, 0x2458}, {&(0x7f0000003c80)={0x118c, 0x2f, 0x200, 0x70bd28, 0x25dfdbff, "", [@generic="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", @typed={0x8, 0x1b, 0x0, 0x0, @u32=0x7}, @typed={0x14, 0x53, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}}, @typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@rand_addr=0x9}, @nested={0x157, 0x54, 0x0, 0x1, [@typed={0x8, 0x3c, 0x0, 0x0, @uid}, @generic="f50423e9a6a0c9e6083addeee6e9bda83fd3d51915b078309b9074142960f4845e7e14a11e7047e62de5565722f5e65fb75f7bb261fbf0289d580e62bc3d3232086057cb062784671073c4d97a5edc2948e278d82a4108b2051896a5", @typed={0x8, 0x8, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x8}, @generic="904ca2cbf743da1543a89ac388a62d0e7e95a21e4efe60741ed7596f5e88ac5c74ff36cb7af6bc6a69172258b17cec5167b9968218721d611be6f400805da3396facc9bec314", @generic="7c372e6ec3fe29dfd21d501c2e1931485b1a02a35ac0b4593eaf243a972535d3861e84a10863b3eff210901f465a58648cb80dd8455cf85753b45f2ac73095f02a9cd20b1ce80bd9da6e3677e97f8b02b1db2ad498cffaca6ebfe6af278b79b9dfa4946ab29065c7ae000bbdcdf9639908f3e489372e86bb09f1241ea75872f46ab86b800d6f3d493d8594ec17", @typed={0x8, 0x11, 0x0, 0x0, @pid}, @typed={0x8, 0x4a, 0x0, 0x0, @uid=0xee01}]}]}, 0x118c}], 0x3, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r5, r6]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r10}}}], 0x78, 0x600088c0}, 0x2081)

04:52:17 executing program 7:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x2, 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:52:17 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
getpeername(r0, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

[ 1929.689273] kworker/u4:4: attempt to access beyond end of device
[ 1929.689273] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1929.691052] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:52:17 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:52:17 executing program 6:
r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x61, 0x10000)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x1f, 0x1, 0x7f, 0x2, 0x0, 0xfff, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x10010, 0x3, 0x8, 0x1, 0x101, 0x3f, 0x6, 0x0, 0x71f, 0x0, 0x5}, 0xffffffffffffffff, 0xd, r0, 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = inotify_init1(0x1e2aa8cb909a9899)
open_by_handle_at(r2, &(0x7f0000000100)=@reiserfs_2={0x8, 0x2, {0x9, 0x6}}, 0x385200)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0)

[ 1929.759776] loop2: detected capacity change from 0 to 40
04:52:17 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
getpeername(r0, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

04:52:17 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = signalfd(r0, &(0x7f0000000000)={[0x6]}, 0x8)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x1c1a, 0x0, 0x7fff, 0x6, 0x80, 0x8, 0x4}, 0xc)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

[ 1929.855658] kworker/u4:6: attempt to access beyond end of device
[ 1929.855658] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1929.857399] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:52:39 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:52:39 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x5, @any, 0x3f, 0x2}, 0xe)

04:52:39 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x3d, 0x4)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:52:39 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xdf, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1000, 0x1}, 0xe)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)

04:52:39 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0xff, @any, 0xfff, 0x1}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000017c0)={0x0, ""/256, 0x0, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000500)={{}, r4, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000200)={{}, r4, 0x18, @unused=[0x3ff, 0xcd0, 0x0, 0x4], @name="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"})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", r4, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]})
ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000180)={{r0}, r4, 0xc, @inherit={0x88, &(0x7f00000000c0)={0x1, 0x8, 0x80000001, 0x7f, {0x20, 0xe219, 0xfffffffffffffffe, 0x20, 0x81}, [0x1, 0x3f, 0x66, 0x5, 0x9, 0x5d533b1c, 0x3ddb6e7d, 0x352e]}}, @name="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"})

04:52:39 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)}], 0x1, 0x7fffff8, 0x0)

04:52:39 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
getpeername(r0, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

[ 1951.962385] loop2: detected capacity change from 0 to 40
04:52:39 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
getpeername(r0, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

[ 1952.024791] kworker/u4:2: attempt to access beyond end of device
[ 1952.024791] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 1952.026378] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:52:39 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1952.052699] loop2: detected capacity change from 0 to 40
[ 1952.075698] syz-executor.2: attempt to access beyond end of device
[ 1952.075698] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:52:39 executing program 5:
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000001100))
getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
fcntl$addseals(0xffffffffffffffff, 0x409, 0xf)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x78)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={r1, 0x0, r0, 0x9, 0x80000})
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x5)

04:52:39 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf604, 0x1}, 0xe)
r2 = getpid()
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x5, 0x3f, 0x2, 0xa1, 0x0, 0x9, 0x20, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x7, 0xf3}, 0x4404, 0xff, 0x7ed, 0x9, 0x101, 0x3, 0x800, 0x0, 0xeaf, 0x0, 0x6}, r2, 0xf, 0xffffffffffffffff, 0x1)

04:52:39 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
getpeername(r0, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

04:52:39 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:52:39 executing program 6:
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)

[ 1952.154249] loop2: detected capacity change from 0 to 40
[ 1952.191789] syz-executor.2: attempt to access beyond end of device
[ 1952.191789] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:52:54 executing program 7:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x2]}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x2, 0x1, 0x4, 0x1, 0x9}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x3}, 0xe)
syz_io_uring_setup(0x2e4c, &(0x7f0000000040)={0x0, 0xdf64, 0x10, 0x3, 0x1d1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

04:52:54 executing program 6:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {0x4, 0x1f}}, './file0\x00'})
clock_gettime(0x0, &(0x7f0000006a80)={<r3=>0x0, <r4=>0x0})
recvmmsg$unix(r2, &(0x7f0000006900)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000001380)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/143, 0x8f}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000001200)=""/163, 0xa3}, {&(0x7f00000012c0)=""/136, 0x88}], 0x5, &(0x7f0000001400)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f00000014c0)=@abs, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001540)=""/74, 0x4a}, {&(0x7f00000015c0)=""/38, 0x26}, {&(0x7f0000001600)=""/198, 0xc6}, {&(0x7f0000001700)=""/184, 0xb8}, {&(0x7f00000017c0)=""/107, 0x6b}], 0x5, &(0x7f00000018c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000001a00)=""/123, 0x7b}, {&(0x7f0000001a80)=""/171, 0xab}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/207, 0xcf}, {&(0x7f0000002c40)=""/110, 0x6e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x6, &(0x7f0000003d40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000003e80), 0x6e, &(0x7f0000005100)=[{&(0x7f0000003f00)=""/4096, 0x1000}, {&(0x7f0000004f00)=""/64, 0x40}, {&(0x7f0000004f40)=""/86, 0x56}, {&(0x7f0000004fc0)=""/35, 0x23}, {&(0x7f0000005000)=""/222, 0xde}], 0x5, &(0x7f0000005180)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{0x0, 0x0, &(0x7f0000006600)=[{&(0x7f00000052c0)=""/221, 0xdd}, {&(0x7f00000053c0)=""/14, 0xe}, {&(0x7f0000005400)=""/36, 0x24}, {&(0x7f0000005440)=""/145, 0x91}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/60, 0x3c}, {&(0x7f0000006540)=""/174, 0xae}], 0x7, &(0x7f0000006680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000006740), 0x6e, &(0x7f00000068c0)=[{&(0x7f00000067c0)=""/133, 0x85}, {&(0x7f0000006880)=""/56, 0x38}], 0x2}}], 0x6, 0x40002200, &(0x7f0000006ac0)={r3, r4+10000000})

04:52:54 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r1=>0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
perf_event_open(&(0x7f0000001a80)={0x1, 0x80, 0xfb, 0x2, 0x0, 0x4, 0x0, 0x0, 0x10220, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000001a40), 0x8}, 0x108, 0xef, 0x7, 0x7, 0x0, 0x8, 0x60, 0x0, 0x4, 0x0, 0x37}, r1, 0x3, r2, 0x8)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001900)=[{{&(0x7f0000000040), 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/137, 0x89}, {&(0x7f0000001200)=""/190, 0xbe}, {&(0x7f00000012c0)=""/237, 0xed}, {&(0x7f00000013c0)=""/96, 0x60}, {&(0x7f0000001440)=""/74, 0x4a}], 0x6, &(0x7f0000001540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f00000015c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000000180)=""/38, 0x26}, {&(0x7f0000001640)=""/151, 0x97}, {&(0x7f0000001700)=""/210, 0xd2}, {&(0x7f0000001800)=""/116, 0x74}], 0x4, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}], 0x38}}], 0x2, 0x0, &(0x7f0000001980)={0x77359400})
r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000019c0), 0x2, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000100), 0x1)
kcmp$KCMP_EPOLL_TFD(r1, r3, 0x7, r4, &(0x7f0000001a00)={0xffffffffffffffff, r5, 0x2})

04:52:54 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
accept4(r0, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000080)=0x80, 0x0)

04:52:54 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:52:54 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
getpeername(r0, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

04:52:54 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)}], 0x1, 0x7fffff8, 0x0)

[ 1966.935043] loop2: detected capacity change from 0 to 40
04:52:54 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

[ 1966.998814] syz-executor.2: attempt to access beyond end of device
[ 1966.998814] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:52:54 executing program 7:
r0 = memfd_secret(0x80000)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100007f00000000010000000000000500000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000001c0c0000040000000300000000000000ff7f000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f85e1aea92d650a1a532261cca220b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0300"/591])
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)

04:52:54 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0), 0xe)
getpeername(r0, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

04:52:54 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x8000000)
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000000c0), 0x0)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={r1, r2+60000000}, 0x1, 0x1, 0x1}, 0x2)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:52:54 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:52:54 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0), 0xe)
getpeername(r0, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

04:52:54 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000008dc0)=[{{&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000048c0)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000480)=""/116, 0x74}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000000500)=""/180, 0xb4}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/176, 0xb0}, {&(0x7f00000046c0)=""/124, 0x7c}, {&(0x7f0000004740)=""/255, 0xff}, {&(0x7f0000004840)=""/88, 0x58}], 0xa}, 0xdf53}, {{&(0x7f0000004980)=@generic, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000004a00)=""/154, 0x9a}], 0x1, &(0x7f0000004b00)=""/6, 0x6}, 0x86}, {{&(0x7f0000004b40)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004bc0)=""/227, 0xe3}, {&(0x7f0000004cc0)=""/154, 0x9a}, {&(0x7f0000004d80)=""/17, 0x11}, {&(0x7f0000004dc0)=""/99, 0x63}], 0x4, &(0x7f0000004e80)=""/46, 0x2e}, 0x58}, {{&(0x7f0000004ec0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000004f40)=""/95, 0x5f}], 0x1, &(0x7f0000005000)}, 0x9}, {{&(0x7f0000005040)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000005540)=[{&(0x7f00000050c0)=""/81, 0x51}, {&(0x7f0000005140)=""/244, 0xf4}, {&(0x7f0000005240)=""/50, 0x32}, {&(0x7f0000005280)=""/4, 0x4}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f00000053c0)=""/28, 0x1c}, {&(0x7f0000005400)=""/23, 0x17}, {&(0x7f0000005440)=""/224, 0xe0}], 0x8}, 0x9}, {{&(0x7f00000055c0)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000005700)=[{&(0x7f0000005640)=""/148, 0x94}], 0x1, &(0x7f0000005740)=""/163, 0xa3}, 0x2}, {{&(0x7f0000005800)=@nfc, 0x80, &(0x7f0000007c00)=[{&(0x7f0000005880)=""/4096, 0x1000}, {&(0x7f0000006880)=""/94, 0x5e}, {&(0x7f0000006900)=""/219, 0xdb}, {&(0x7f0000006a00)=""/189, 0xbd}, {&(0x7f0000006ac0)=""/4096, 0x1000}, {&(0x7f0000007ac0)=""/121, 0x79}, {&(0x7f0000007b40)=""/81, 0x51}, {&(0x7f0000007bc0)=""/24, 0x18}], 0x8, &(0x7f0000007c80)=""/176, 0xb0}, 0x1ff}, {{&(0x7f0000007d40)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000008480)=[{&(0x7f0000007dc0)=""/158, 0x9e}, {&(0x7f0000007e80)=""/149, 0x95}, {&(0x7f0000007f40)=""/165, 0xa5}, {&(0x7f0000008000)=""/88, 0x58}, {&(0x7f0000008080)=""/241, 0xf1}, {&(0x7f0000008180)=""/214, 0xd6}, {&(0x7f0000008280)=""/10, 0xa}, {&(0x7f00000082c0)=""/124, 0x7c}, {&(0x7f0000008340)=""/22, 0x16}, {&(0x7f0000008380)=""/217, 0xd9}], 0xa, &(0x7f0000008540)=""/16, 0x10}, 0x888}, {{&(0x7f0000008580)=@nfc_llcp, 0x80, &(0x7f0000008c00)=[{&(0x7f0000008600)=""/173, 0xad}, {&(0x7f00000086c0)=""/48, 0x30}, {&(0x7f0000008700)=""/242, 0xf2}, {&(0x7f0000008800)=""/237, 0xed}, {&(0x7f0000008900)=""/177, 0xb1}, {&(0x7f00000089c0)=""/62, 0x3e}, {&(0x7f0000008a00)=""/115, 0x73}, {&(0x7f0000008a80)=""/176, 0xb0}, {&(0x7f0000008b40)=""/133, 0x85}], 0x9, &(0x7f0000008cc0)=""/229, 0xe5}, 0xfffffffb}], 0x9, 0x20, &(0x7f0000009000))
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000009040)={0x7, 0x9, 0x6, 0x0, 0x1, 0x18, 0x1}, 0xc)
io_setup(0x9, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000001c0)=')', 0x1}])
r4 = dup2(r0, r0)
r5 = io_uring_setup(0x155f, &(0x7f00000001c0)={0x0, 0x4bc5, 0x4, 0x1, 0x2e4})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r6, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000100), 0x1)
io_submit(r2, 0x4, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x800, r0, &(0x7f0000000000)="dfb84532d03bce458adbeea0226e9fcaf7bf9dc1ad4e9e22468e28eabc693f230f6ed42b5519abb009f6ad051fe9b22f8a371eb994829cd25f63cbbaac68605ce1f5a991ddf5cda5447fc44c962f586f39ac3a113e08fb464fe39779dde0b66c03b8d5757b3f4bc8f7efd9ca44d0de8967a419de6faf5df6d3cee6714ecdb3605eba50a2829bc90c37d60ec4e690255f61f7622be2df47a33a7ea46e045bb5caef4f01f5383475592c38e96845c25e01f43cb86505e0", 0xb6, 0x2, 0x0, 0x1}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3, r4, &(0x7f0000000100)="5bcc6b6ef3d5dc668772a6c19b823326926c4f6c133efa5404f9d482fac9e5d28c0796f1b5b03aded671640c558709be00bebef76a3386d4070330537e52780cc1f345f1a394685b8aaf4edca899d745a5a5b98e9ba005b792a56d7e8edafffa4b1922ebdf08228a70939824101c2c", 0x6f, 0xba}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x1, r5, &(0x7f0000000240)="abd2d90c5256f54f041528e770c61f8c2ba2c0dafd11735f79ebb40aa8a13af3efef6b667a8d97662b9560f00829e17b6b72d99d1c4568c97249a9e942643b38809947523537d0e51274aced0b506c", 0x4f, 0x80000000, 0x0, 0x1, r6}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x7, r7, &(0x7f0000000300)="64470ccdcfb7145053a90938a94c1e38c70e3b3a26aee635eff8471b64770c2a156037673d75e2ff7c1c24a520c4e5aaeecdd010255201305a0c58f5384b487d6d1b7c44e846c3df0b", 0x49, 0x7, 0x0, 0x6}])

[ 1967.137462] loop2: detected capacity change from 0 to 40
04:52:54 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9cdf, 0x8c200)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x7, 0x0)
open$dir(&(0x7f0000000500)='./file0\x00', 0x6a2002, 0x1e0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
openat$cgroup_int(r1, &(0x7f0000000540)='memory.swap.max\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000040))
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000240)={0x8, 0x1}, 0x2)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, &(0x7f0000001100))
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

[ 1967.191648] syz-executor.2: attempt to access beyond end of device
[ 1967.191648] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:52:54 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0), 0xe)
getpeername(r0, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

04:52:54 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100)=0x2e)

04:52:54 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1967.257597] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1967.259153] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1967.260388] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1967.261551] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00
[ 1967.262851] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2
[ 1967.264338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1967.264786] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1967.265399] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1967.267163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1967.267555] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1967.268186] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1967.268845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1967.269466] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1967.270094] Buffer I/O error on dev sr0, logical block 2, async page read
[ 1967.270768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1967.271248] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1967.271878] Buffer I/O error on dev sr0, logical block 3, async page read
[ 1967.272555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1967.272948] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1967.273627] Buffer I/O error on dev sr0, logical block 4, async page read
[ 1967.274308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1967.274709] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1967.275344] Buffer I/O error on dev sr0, logical block 5, async page read
[ 1967.275980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1967.276404] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1967.277039] Buffer I/O error on dev sr0, logical block 6, async page read
[ 1967.277730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1967.278161] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1967.278788] Buffer I/O error on dev sr0, logical block 7, async page read
[ 1967.323371] loop2: detected capacity change from 0 to 40
[ 1967.389952] syz-executor.2: attempt to access beyond end of device
[ 1967.389952] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
[ 1980.286985] loop2: detected capacity change from 0 to 40
04:53:07 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000040)={0x1, 0x6, 0x4})
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x7fff, 0x2}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x0)
setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000000c0)=0x9, 0x4)

04:53:07 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
close(r1)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x2, @none, 0x80}, 0xe)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:53:07 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

04:53:07 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:53:07 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
preadv2(r1, &(0x7f00000000c0), 0x0, 0x40, 0x7, 0xc)

04:53:07 executing program 4:
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0x40000000, 0x0, 0x5, 0x2})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5, @none, 0x0, 0x1}, 0xe)
flock(r0, 0x2)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x101}}, './file0\x00'})
dup2(r0, r1)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x7, &(0x7f00000000c0)={r2, r3+60000000}, 0x1, 0x1, 0x1}, 0xffffffff)

04:53:07 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0)

04:53:07 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r3=>0x0})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000340)={{}, r3, 0x6f90974c84ddaf6, @unused=[0x0, 0x9, 0x1f, 0x173], @name="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"})
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xf801, @none, 0x3ff}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:53:08 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = signalfd4(r0, &(0x7f0000000040)={[0x8]}, 0x8, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="0100000000000000432f52696c653000"])
r2 = fcntl$dupfd(r0, 0x0, r0)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x100, @none, 0x6ad0, 0x1}, 0xe)

04:53:08 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

[ 1980.408551] syz-executor.2: attempt to access beyond end of device
[ 1980.408551] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:53:08 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0x2}}, './file0\x00'})
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000180)=0x7, 0x2)

04:53:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:53:08 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040), 0x4)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x0, 0x1ff, 0x6, 0xff, 0x9, 0x2}, {0x80, 0x2, 0x1, 0x3, 0x16b84, 0x1}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})

[ 1980.544027] loop2: detected capacity change from 0 to 40
[ 1980.605928] syz-executor.2: attempt to access beyond end of device
[ 1980.605928] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:53:08 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x7, @any, 0x40, 0x2}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000280)=0x4)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"3f1a8adaf9dc1c2492b84ee2ecc19f9e", 0x0, <r4=>0x0, {0x2, 0x3}, {0x4, 0x7ff}, 0x4, [0xff, 0x1, 0x8, 0x4, 0x8, 0x1000, 0x81, 0x2, 0x20, 0x1, 0x0, 0x1, 0x3, 0xffff, 0x31, 0x8]})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000001140)={{r3}, r4, 0x2, @inherit={0x68, &(0x7f0000000040)={0x0, 0x4, 0x2, 0x1, {0x2a, 0x2dd1, 0x80000000, 0x1ff, 0x9}, [0x8, 0x6, 0x7, 0x100000000]}}, @name="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"})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xd2, 0x1}, 0xe)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000000100), 0x1)
flock(r6, 0x2)
bind$bt_l2cap(r5, &(0x7f0000000240)={0x1f, 0x1, @none, 0x5}, 0xe)

04:53:08 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000100))
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4})
r2 = accept4$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x80000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000100))
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8, @any, 0x252c, 0x1}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000104000018000000", @ANYRES32=r0, @ANYBLOB="01000000070000002e2f66696c653000"])
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:53:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 1980.692526] loop2: detected capacity change from 0 to 40
[ 1980.720564] syz-executor.2: attempt to access beyond end of device
[ 1980.720564] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:53:23 executing program 4:
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x8}, 0xffffffffffffff0b)
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x101, 0x400002)
io_submit(r0, 0x3, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0xfa3e, 0xffffffffffffffff, &(0x7f0000000040)="d657c673c447b8f5057a1fa7e88bc1d56f37de452eb4461b73a3cdbbb2f936a94e04208aba17d011696351f62e1755a8763f06803355faf2dd972ef067cefaa54132c5ff6164dc8ede49daf3e4770409fc6fc0ad8d9a9a15a6d16c928af28073b248f8e8f303f0ff", 0x68, 0xd39}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x3ff, r1, &(0x7f0000000140)="35d32f2166eae07cf428f27695a23c0d9d0124cb5dc5fb1a336171f02160051448c384686e8051bc9ab1d3718e4f15dfabd565b8c9357cf049890cbc9f94048118e2117a40", 0x45, 0x80000000, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0xfffd, 0xffffffffffffffff, &(0x7f0000000240)="ea8b377d682d86f650821deb591f9b27e79f11262ad3d07f0552b0128da86088398a3ee0b358b7dacf3b8a96ca03f2464d51f70587fc5242ec2417ab87fda68e2be787b09857990ebc", 0x49, 0x7bc, 0x0, 0x1}])

04:53:23 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x4, 0x1}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:53:23 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), 0x4)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100), 0x1)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000100), 0x1)
poll(&(0x7f0000000040)=[{r5, 0x85}, {r0, 0x8183}, {r0, 0x44e2}, {r3, 0xc018}, {r0, 0x2}, {r4, 0x504}, {r4, 0x150}, {r0}], 0x8, 0x5)
r6 = socket$packet(0x11, 0x2, 0x300)
fsetxattr$trusted_overlay_origin(r5, &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x0)
ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000180))
ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000000)={0x1f, 0xc, 0x7})

04:53:23 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'ip6_vti0\x00', {0x9}, 0xfeca})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=<r1=>0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0))
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
r4 = signalfd(r2, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, r3, 0xb, r4, 0x9)
r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r5, 0x10, &(0x7f0000000000)={0x0, <r6=>0x0})
r7 = signalfd(r5, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, r6, 0xb, r7, 0x9)
r8 = syz_open_procfs(r1, &(0x7f0000000380)='net/netfilter\x00')
r9 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r9, 0x10, &(0x7f0000000000)={0x0, <r10=>0x0})
r11 = signalfd(r9, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, r10, 0xb, r11, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000240)={0x280003080, &(0x7f0000000040), &(0x7f00000003c0), &(0x7f00000000c0), {0x18}, &(0x7f0000000100)=""/11, 0xb, &(0x7f0000000140)=""/61, &(0x7f0000000080)=[r1, r6, r3, 0x0, r1, r10], 0x6, {r8}}, 0x58)

04:53:23 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

04:53:23 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

04:53:23 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0)

[ 1995.492532] loop2: detected capacity change from 0 to 40
04:53:23 executing program 4:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
r2 = signalfd(r0, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, r1, 0xb, r2, 0x9)
clone3(&(0x7f0000000300)={0x2000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3d}, &(0x7f0000000200)=""/233, 0xe9, &(0x7f0000000100)=""/82, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, r1], 0x3}, 0x58)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r3, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0xfff8, @any, 0x285, 0x1}, 0xe)

04:53:23 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x800, 0x1}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe)

[ 1995.588934] syz-executor.2: attempt to access beyond end of device
[ 1995.588934] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:53:23 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8e, @any, 0x20, 0x2}, 0xe)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040))
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='blkio.throttle.read_iops_device\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000280)={0x20000002})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:53:23 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x1, 0x9, 0x5, 0x4, 0x0, 0x0, 0x800}, 0xc)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)

04:53:23 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, 0x0, 0x0, 0x7fffff8, 0x0)

04:53:23 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none, 0x8000, 0x2}, 0xe)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x1f, &(0x7f0000000040)=0x1)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

04:53:23 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x3}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

[ 1995.775185] loop2: detected capacity change from 0 to 40
04:53:23 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x9, 0x4)

[ 1995.857693] syz-executor.2: attempt to access beyond end of device
[ 1995.857693] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:53:36 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, &(0x7f0000000180)='vfat\x00', &(0x7f0000000240)=']].^%:)\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='vfat\x00'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, 0x0, 0x0, 0x7fffff8, 0x0)

04:53:36 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x3f, 0x1)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000100)=0x6)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x1ff, 0x1}, 0xe)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
openat$cgroup_ro(r1, &(0x7f00000000c0)='freezer.state\x00', 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))

04:53:36 executing program 6:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
openat(r1, &(0x7f0000000040)='./file0\x00', 0x109000, 0x20)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0)

04:53:36 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000000c0), 0xd493)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x8001}, 0xe)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x101, 0x2}, 0xe)

04:53:36 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100), 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000100))
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x8, 0x2)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000500)={0x0, 0xfff, 0x4, 0x0, 0x8, [{0x4, 0xc00000000000, 0x800, '\x00', 0x2100}, {0xcf, 0xe72, 0x10001, '\x00', 0x180a}, {0xdcb4, 0x0, 0x4, '\x00', 0x2000}, {0x4, 0x8, 0x9c, '\x00', 0x2000}, {0x4, 0x6d3b2264, 0x5, '\x00', 0x4}, {0x0, 0x1, 0x80000000, '\x00', 0x1000}, {0x100000000, 0x2, 0xfffffffffffffffc, '\x00', 0x9}, {0xffffffffffffffff, 0x5, 0x6, '\x00', 0x4}]})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r0, {0x10001, 0xb1}}, './file0\x00'})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000100), 0x1)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000700))
accept(r2, &(0x7f0000000400)=@l2tp={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x80)
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[r3, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r3], 0x9)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000200))
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r6=>r3, {0x2d7d}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000097f55007ab06241621cf045bae49b700e60000000000", @ANYRES32=r6, @ANYBLOB="06000000000000002e2f66696c653100"])

04:53:36 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80)

04:53:36 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0)

[ 2008.993443] loop2: detected capacity change from 0 to 40
04:53:36 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x2, @any, 0x62, 0x1}, 0xe)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x5}, 0xe)
r1 = accept4(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000080)=0x80, 0x800)
connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x79, @none, 0x7, 0x1}, 0xe)
ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000100)={0x1, 0x1f})

[ 2009.057382] syz-executor.2: attempt to access beyond end of device
[ 2009.057382] loop2: rw=2049, sector=44, nr_sectors = 12 limit=40
04:53:36 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001100))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000))

04:53:36 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'macvlan1\x00'})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

2023/02/15 04:53:36 Manager.NewInput call failed: read tcp 127.0.0.1:44678->127.0.0.1:38491: i/o timeout

VM DIAGNOSIS:
04:58:40  Registers:
info registers vcpu 0
RAX=00000000006823db RBX=ffffffff8542a840 RCX=ffffffff8446e87e RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff81284600 RBP=0000000000000000 RSP=ffffffff85407e38
R8 =0000000000000001 R9 =ffff88806ce34f83 R10=ffffed100d9c69f0 R11=0000000000000001
R12=fffffbfff0a85508 R13=ffffffff85d24410 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8446f89f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe70a801b000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe70a8019000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005608dfb3795c CR3=000000000e70a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=1c9c9ac74a3ca03300000000000ae988 XMM05=d4a26bf5c272895900000000001eaa18
XMM06=1210b8ba71c2834300000000001120c0 XMM07=bf2846eb774fb8e30000000000112010
XMM08=9a206011704e928b0000000000105210 XMM09=00000000000000000000000000000000
XMM10=00200000000000000020000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000089c885 RBX=ffff888008da5040 RCX=ffffffff8446e87e RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff81284600 RBP=0000000000000001 RSP=ffff888008e1fe70
R8 =0000000000000001 R9 =ffff88806cf34f83 R10=ffffed100d9e69f0 R11=0000000000000001
R12=ffffed10011b4a08 R13=ffffffff85d24410 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8446f89f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe1c0d098000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe1c0d096000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb45bfb9010 CR3=00000000189d0000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ce100ed910c271841a33f576c736b5c3
XMM02=42bda23f3c376ed589ae7fcafd873fcf XMM03=1d56325d8fba0e51035375af83755012
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003
XMM08=64707466730073254073250070746673 XMM09=00000000000000000000000000000000
XMM10=4832b484a3ca17b15d4f6744ff128299 XMM11=4eb1fa67e2591842ca0a08c9073e79f6
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000