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"}], 0x2160}}, {{&(0x7f0000000940)=@in={0x2, 0x4e23, @remote}, 0x80, &(0x7f0000000dc0)=[{&(0x7f00000009c0)="d3db0e1ce669017a7cc3e767343365b7dd63c0fe3090d1cf536bd2bcb0de858e00733b51b232eeffc4cd070eadc4241804300449cc27d6e2a1503b04dc61cb1bb62f01e56f69f674cc5539dbe1baa686d879ea4a827733cc6b4c9b334131144645ad8be93dd1abb14c136d9561eb2711b799a86c01615e4ca5ba393d602603229301078b6f", 0x85}, {&(0x7f0000000a80)="4f254e9fc0c2ca0fd491d8b850b703d2890ad143df24b3c65d5aca3e1a1d9cad4adb721d9b2880e1b43169a7e6920a89df0bf777c2b441ea15e6dfb23a4daf5a2851eaab9970e643612764324de72301a8d37ef7d4fa0e12d2be3d2818610665160e26ffbeb20f7fdb4877b11aae468aa6093b136d1853864982f003198bbd14a38354a1ea6b159807895d19d853e573f027", 0x92}, {&(0x7f0000000b40)="f4dfb4b654cca97ceac19942f69e4ac916ca00f53ec19f97c176565f4ee5cdf6acaad3328e4c386f0815bd54d4c898e642ddb46e5aefad5f87056e1bb58a973cd35aba0abbb4440ebd61d85cc8a38e71a3a7cee073ba6d8a3ac848a793df69abacf7712cd0d89b333b899118b224b8ae914c29781012a1c9043fce92b2f0cb6bf5b155b46a3412fd7abd86977c75a9cca4f7", 0x92}, {&(0x7f0000000c00)="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", 0xff}, {&(0x7f0000000d00)="89314729d332b0b6dae0ea3d5788e8222ed9b1d84abba958c95e5005d48c11756bb9792fbb413ec6a233e9274c298f1424075ae3d04081ad1787ba1e291348de2486787eca198023a52641d20bfe287bc2d543f1947c0fbf288d42a9fbd1389a607f168d13640c1443ee132fcbcb047979657ae8b45574cae96e095db6e91803c4847e6de229037b7a8f8e482c48ca10345dda1abf5983cd77efad47cfe65e77526fc1029dd68a7d02a8dd0e580b691ae2a05a0d198639", 0xb7}], 0x5, &(0x7f0000000e40)}}, {{&(0x7f0000000e80)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @rand_addr=0x64010102}, 0x2, 0x4, 0x3, 0x1}}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f00)="c772ffaaec9d43f72e1b5e48285509102f93c1ae62cba4e0cc874583e3c274ea09a3f277c0225a81afcbb012f5735cf622596c29255504c1d07dd5ac2844b0f44b91e1e0f9ed58ef5c62385ecb591864d5ec96c00beda2c8dd6e885d254659e20c0ffb40c24cc89cd03ed1f05b567b4e0c91058b5a47ff76c8274e6fdb93c7eb811d8f79e03cdbd73935336f43ca410d106bcaa0aa3174320644ee44559aa9b944c5a926aa76f6ef41c2328ced03a6dc17e40ce358902f6db916d883b4d30400762e97ef6537a51d8cca6097361f39a202c6d54affc18ffa", 0xd8}, {&(0x7f0000001000)="efcbf8ccee0c7efe51f9122b291862e284bdccacd447ac53baa8587dd7be66d442a7e5938baa6b10ebe6d1f0feafbf5c8b464dce176ef90ade3d938a0ca8bf98d51f3fb50a916197de6c2d6d2e18ea52ff67b9a2019f4ed177cb2c1a8c28f1e8758094ec968338080eb65426c8bd73afef51eb4ece1f2de498e0136705f3b4dc2ddfd51a9070f9b8259291ff1f53ac0d3d14af77a00be041acf69c2db2da28c6ba1389302c27564cafe324a64f7b9cb35fe4474c40", 0xb5}, {&(0x7f00000010c0)="cd408370c5ff855fc38368d19bf0e1ac4c4dc1b92f512f573723792121380fdf2a4a4f9c37c24cc05b07b0d9e9cdac611ca3801d7217b4e8101d15531a8e8a93a403a926b94c58956410af85b38ab71b4914e82f985800f3cdf28f7c4a5b", 0x5e}, {&(0x7f0000001140)="cd", 0x1}], 0x4, &(0x7f0000002540)=[{0x1010, 0x0, 0xffffff81, "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"}, {0xe0, 0x117, 0xfffffc00, "02f1dd6381bf362cf38b1dc45e22d395db20db19a7010f59d66f240f5c941782f1529f537afa98c0302d3817bbbe6be09df6a4ed87fbfcd7fbe2faa8cb027c1c201b53aeb1371036d727d9f1bacaacd20dfdd4d7ac62769b76fa556d7a4b5985299e6270ad4b5e97140040cf06ede4f4ba5a9918b30e342e74eba39ef7a523096b89043164e2ae1f6ce6846f7d902bb440b52b9f004cc572c786a1cbf2bff2d6b9fd5b6cfeb4f3cb64b052359d0c25a0074c8737b432b52c5823b6718ef1765e1f645ade05734854a56ea31e09f9fd"}], 0x10f0}}, {{&(0x7f00000011c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x17, 0x5, "7a4c41f6b408004a9b9ca6df079bfad6651eda5ee0c3a01c930ea4ff41e97b8584059bafb12df7a0af01132e535ec7b5e1c71a87f770c68afe6ca1d5abc17b", 0x2c}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001240)="6f038f537302944fcc54ef833ce36bb633e7c0b2b8208ba910b2295cf1883cbdc9f1583b437c848ee4d3af258e15aa88c47957b69312c6acb3a40e6f2c386e8bf76567acbe0a93b6c9e2885675492d4d2899e6a7c892ed6fabc0d38f0f7eb5967f3ef1ec25c5c59277dd224c790c89069d63f0117388774816cfcd5a877220770d61a95ad32b9b666b5cffcf7b9221bca1906f59f78587a121b56f4516e3", 0x9e}, {&(0x7f0000001340)="12760a5714c6e04674b20142f856af5282062c4d01b0ec3fa2bb0352d240e8e60ef6441f2a4b1bed8868cfc17709cb09733b25c5d3a560103253826afd1008f2c76819cc30a846723b9a802c706c88fb9e76cf2bb5c4c696c268bc67caeb406c4b04555fe30e329802a31dabaa0b0e3592bd6568134c5801b9761c3059123ab924c423347857b79d9bcfeebb135bd298eacc71e3458bde6554f8bf81232c2d7a1719", 0xa2}, {&(0x7f0000001400)="ab87dde1dd252beaa34f28ee0a5434ba076bb2abdc302277c54a6e44ed9559ffa32346d399c44ada2a87a47c12c899883b610871328fc6c5660f2f3bc660bebfe60e5c170f9d617557153267fbc10de15fc9db57009ec720b62b282a94a0beda34a60d073adfc2a70e4c0f573e150aa3da38a8cc167ef301eb2d684fde732b01f47c51f0f4f1a05ef8e0f03395", 0x8d}], 0x3, &(0x7f0000001500)=[{0x78, 0x10a, 0x1, "eb6ecd192b381cfa057fd5728c64fafb19678f871fbf3c9a484b025fc3bfc75189241ead01264c6d09ab5501d8e6e004a2580ec471d92f4f284c0aa4674747b1ed3c2db73cce3226b6e17d1639c467b63afa0e40a9b87df2674ec9c78f6b156f01ec489427c50c"}, {0xf0, 0x107, 0x400, "94923cbc151c0f0f82c6fa891353b8417e57c80ad3bfa22f18138d2ef8312ef7a6b6e5a9b3d670308a4c8797f379fcb756451d171f35b897c0a4714d2b8987f25973856c9ab36a873bd5cf004f7a9914b9cca09828ab63ad75e7f46edec50fd25d33ab49e066e097495d783e8d8a004364dad0355116ca18908a7d088891596152fba2490b4b1e4a7c64c0d60541998e695994b74bd473e0ba6c7f6f8ef85bc7c59fb2da3daf75c4ec5523339d0e8f71e69ce5a0820ffb4c45581a6e1ad38f516caeb2128c10c4aea7d318cec713989d2eeebdf51cd7911ccb"}, {0xf8, 0x103, 0x5, "2e42580a64e81449cd5a7ea213db7151fff02e01cff537fcf4100e78bc734aec8ba268ce182d8935c0fb19077a3977a06f5417bf2dba2cd109bea5101daa92a4200c8d36be607125c8e71df6522b1e0d9d464fa55feb9ea85930de456d9b9cd0fb7c732d7718e4d09fc843a23223e71e0c497b9090b226781f283d85ee4874d30c4bd48893d0edac3fdc23b2a42c5dd6cf90b300a5e12388ffe20a9dc8ddec16323dc3485adf55f18d38c457ba1f12e1b0a5225abcacf2bbd6086d3c5b9b4ab95e93a2d512a7da22aa97b98cfc869fd459e745e9548693646f42f44ca57c8a761e"}, {0x80, 0x29, 0x1, "b2027c6da32e637c04b64f06cbf9befba9c7967fce34692d166b797e08d8febef2428e2ba8db34c12e7df04c0f44e6c20d29339badeb483b316192b5ff4d7d352d25bd9a965a944ebecff1136a3a625428cbec12a6f097a1226394017383f6fbd3c85a78c4cad7ee0a4d"}, {0xf8, 0x1, 0x1, "9c000495186cee57b3185b1c26da9560a87761d938ecc097739ea2ed1c37c560a33429598b1256adaf8c72e17e0346117ea7cbed04a0a75d1ca5700b1a595a11068aa501e48bf268bb7c79dec2f40efa033567f55a09fe51a31d17bfb6b02da57e7c6410a996917cf20b50a282f6283ce3e10af6504bf99c49016fa78bea2f31e9b4bfc8dc33b2ffd1f1fa4338b17f4cbfc7341367b504be4fccd830cb05fd1fb6ae7982c6811a10dcd13b588912202b371909dd0dd0d8f9ed97d05985b8e14005e58ba9861ad31480ac537633f4c6183c2ffa438776b9ad2319210c8699d470ad226a59"}], 0x3d8}}], 0x4, 0x1)
ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x14)
ioctl$VT_WAITACTIVE(r1, 0x5607)

05:09:00 executing program 6:
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = fork()
ptrace$setopts(0x4206, r2, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r2, 0xc, r1, 0x1)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xce, 0xa5, 0x3c, 0x7, 0x0, 0x200, 0x0, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f00000000c0), 0x5}, 0x4, 0x76a5, 0x800, 0x5, 0xf16b, 0x2, 0x69, 0x0, 0x4, 0x0, 0x9}, r2, 0xb, 0xffffffffffffffff, 0x1)
perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x1, 0x6, 0x1f, 0x1f, 0x0, 0x3ff, 0x20, 0x19, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0xe3e1, 0x70}, 0x4099, 0x3a32, 0x0, 0x2, 0x8, 0x47, 0x0, 0x0, 0x3ff, 0x0, 0x27}, r1, 0xffffffffffffffff, r0, 0xe)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc04c5349, &(0x7f00000007c0))
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f00000001c0))
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

[ 2948.930817] loop4: detected capacity change from 0 to 40
[ 2948.939718] loop1: detected capacity change from 0 to 40
05:09:00 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:09:00 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000480)=<r2=>0x0, {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x2, 0x1, 0x4, 0x0, 0x0, 0x8, 0x1000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8c0d, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x8, 0x200, 0x8, 0x1, 0x2869, 0x7, 0x5, 0x0, 0x4, 0x0, 0x101}, r2, 0x9, 0xffffffffffffffff, 0x1)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x1, 0x2, 0x1, 0x0, 0x8001, 0x820, 0x284805e2deec763f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x208, 0x17d, 0x9, 0x6, 0xd99, 0x9, 0x4, 0x0, 0x1930, 0x0, 0x2}, r1, 0x0, r0, 0x8)

05:09:00 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00')
ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000040))

[ 2949.121881] loop1: detected capacity change from 0 to 40
05:09:00 executing program 3:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x880)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0xff3f0000, 0x0)

05:09:00 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:09:00 executing program 6:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x80, 0x0, 0x0, 0x1, 0x14000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x20000000000}, 0x8800, 0x1, 0x7, 0x8, 0x5, 0x9, 0x7, 0x0, 0xffffffff, 0x0, 0x3}, 0x0, 0x7, r1, 0x1)

05:09:00 executing program 7:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
io_setup(0x6, &(0x7f0000000000)=<r0=>0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
connect$inet6(r1, &(0x7f0000000740)={0xa, 0x4e20, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfd}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r2 = dup(r1)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58)
io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x800, 0xffffffffffffffff, &(0x7f0000000040)="0b73ad97989cf200ac5859e4dd59a3ac7f3df37fdbfb3519cb3073d6ff4ccb03e2f531fc17a9858a440216b95b4a7b9c71d828c61f5b4d49c9e16beac5a461bc772a12d399115a267c11fb7c32108e6d580774f0e7", 0x55, 0x9, 0x0, 0x0, r2}, &(0x7f0000000100))
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
clone3(&(0x7f0000000680)={0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)

05:09:00 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:09:00 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000040)=[r1, r0]}, 0x2)

05:09:00 executing program 3:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'})
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0xff3f0000, 0x0)

05:09:00 executing program 7:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 2949.434520] loop1: detected capacity change from 0 to 40
[ 2949.463831] syz-executor.4: attempt to access beyond end of device
[ 2949.463831] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2949.463873] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2949.511359] syz-executor.1: attempt to access beyond end of device
[ 2949.511359] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2949.511388] Buffer I/O error on dev loop1, logical block 10, lost async page write
05:09:18 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:09:18 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
sendto(r0, &(0x7f0000000180)="e9e049943c4d0ddd74d9ed00d7cfddea23c0be11355d01eabcb417ab012022193cd71b6bfda00e7aa3366fb561d79f7d3952f983beca0612ebdfb8d26013ae8735d0c3e5099f5a2116e8baec4dc38a2aada219184f4a12f46eda02ea462fb3878369e138010080f4813ce7d8ddd7cd84d82fc01d5d3d55df9fb2fd97f8a73df1e865a5831f0c1cf6760c65779e67678c2affaeb61e6b096edb0c8e2e84d17f61350777270a4ba8586642471f976043dd62d3a530380a9423fbd275dc10926d99e855d9a65f492c9a4cd089986a3d8f730f2789314349f14df35e2e9c1f5b3915a78a", 0xe2, 0x80, &(0x7f00000000c0)=@generic={0x23, "cc9c8d28d2009b114032fd53e45a9dca0b7913c84e6283cb1a7da9a5244abb94f4231bcef53f81a1cc880ea2ed32f607d7e824cd6b11976ebf3b20f0156d4082b970b0d390ac63a3355b54d38e4878a1f16229a275030880a75f010c0fa6ca8d6a80cbdf44a63eec9bb9e0cca1fb8e91451ac6572889dfda49fee3f967c9"}, 0x80)

05:09:18 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x1e, 0x1e, 0x8e})
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})

05:09:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:09:18 executing program 3:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0xff3f0000, 0x0)

05:09:18 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8001, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:09:18 executing program 7:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x3, 0xffffffffffffffff, 0x1b)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x2e}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x8, &(0x7f0000000080))

05:09:18 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x581a82, 0x168)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@private=0xa010100, @remote}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r1=>0x0})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc04c5349, &(0x7f00000007c0))
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000001c0)={0x0, 0x100000001, 0x0, 0x4, 0x2, [{0x101, 0x8, 0x1, '\x00', 0x1404}, {0x4456, 0x2, 0x400, '\x00', 0x2405}]})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc04c5349, &(0x7f00000007c0))
ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f00000000c0)={0x5, 0x131c})
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000180)={@remote, @empty, r1}, 0xc)

05:09:18 executing program 3:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0xff3f0000, 0x0)

05:09:18 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x8000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:09:18 executing program 6:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x1e, 0x0, 0x0)
shutdown(r0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume_offset', 0x2, 0x0)
write(r1, &(0x7f0000000140)="c2", 0x1)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000000c0)={0x6, 'tunl0\x00', {0x3}, 0x8001})

05:09:18 executing program 3:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0xff3f0000, 0x0)

[ 2967.269164] loop4: detected capacity change from 0 to 40
[ 2967.273649] loop1: detected capacity change from 0 to 40
[ 2967.413664] syz-executor.1: attempt to access beyond end of device
[ 2967.413664] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2967.413711] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2967.454777] audit: type=1400 audit(1656652158.883:13): avc:  denied  { read } for  pid=14273 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 2967.737799] syz-executor.4: attempt to access beyond end of device
[ 2967.737799] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2967.737845] Buffer I/O error on dev loop4, logical block 10, lost async page write
05:09:37 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/67, 0x43, 0x324, 0x0, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000540)={0x0, 0x90, 0x9, 0x6493, 0xf, "0b46c6cb08991298"})
r2 = dup(r1)
clone3(&(0x7f0000000480)={0x104800, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x4000035}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000440)=""/19, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58)
ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0xf, 0xf, 0x1c1, &(0x7f0000000000)="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"})
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r3, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
dup(r3)
sendmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000680)=[{0xc0, 0x108, 0x1, "fe1895832497b0112618427a649c679e98cfc106d239b27fb52003e0d503daf4f63ee9d5325d76d52aad9be696bcd6ca565dddccf853d6afca3d7042f4c8899cb8ecfbab8ccba7e8ecdf90450c750827b9a549b82c4b4fb2db8113f5a0eebd75cf6d6990f75aa9a2d1028bc1a81f362762bac686cd1561f57af6fb6a3714dabae71014c55d65d054d5694eb571146ff705105183e932c50b8fec1a8c305d8352afb636fee686b161f177b536ef7ff2"}], 0xc0}}, {{&(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x1, @random="936bc646a5c5", 'vcan0\x00'}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)="f035c693d51e9b48af664e49e5e521c5113fc0a57ebefa089aff2231c32993b66d1bbf9b08312281205a08d264e32ca41edc5a4239f4f190bf455c1c27a4479319f152bdd8519b5324227ae77c71277e25245a440888d5db831ccec30d3011169fd0585a4011734a2bc39fc9b7fd12e784f842443b9b839a67795f4d20aae48d76151e834df2a8882ec357fac1fdc9d3ec1a7cb91a34534942443003829110524cd7", 0xa2}], 0x1}}], 0x2, 0x41)

05:09:37 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:09:37 executing program 5:
openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x502163, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', <r4=>0x0, 0x29, 0x6, 0xff, 0x8000, 0x41, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x700, 0x700, 0x6, 0x7ff}})
setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000240)={@broadcast, @private=0xa010101, r4}, 0xc)
r5 = syz_open_dev$rtc(&(0x7f0000000300), 0xeed, 0x8000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000700)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000900)={{r5}, r6, 0x8, @unused=[0x3, 0x9, 0xfffffffffffffff9, 0x6], @name="5ba564350a0be3f930b11e116b63f2f7c75445cab3c50b44d6e24340c70c982b12ea755199c50131a2b19b49a301eeeb2035bbc6c6d6cc6cb441686dc1bee0e092a49853a3a9637d5f5f86c84ab73610a90caca7ecbc2f0457b5384660fad937e20ba8a64e6fd3ac5db259001ee9306ea19e6bdfb220dbe345430c3a39e41ad6ad92e05db8c3c765ece0829732b272f33e20163f3236452868488f17423ffa532f170e35285f01d1bc9be151f9b2366afedf32902e1ec9a55061e751dd5d0d544f9921b02741d65712e8bd4811a1406bca1786a7c941cb945772bc5d58ddea2f8cd6e7aeeaffd05f1ffdcea57c4f145f757837eb70aae610d5927184265bad5a682ef4f220d502d9aafe2dda7757e072b3b9cf4dce823e428916854dca459e23cd9774c66726bfa027482760b14a8f859b9c93a1646033e39d9b38450087568897b30669d7359bcd3f78ed163a708205b5ea7f20bdf6a3056f2a86a6bb207284c48fbc7f7fe9b43d04f668bd7dc477dd9afc2a15d17b0f0d5f80c11f38c1048664cb6aa1cdf3513cf7c4e9d25a532708bc26158bce9d3249018014f0c3ef904e8aefafe85f4ca5e0856cba94b876aba6ccdeb7a648af9941b47e4fe347677a63fc99935324c51fc7fa316a6f348bf27340d714507b12b2093af8bc2a476242c4134d15395b2ad6e6bf7e06cbae440c6c27d85b2c2046af972c0e79d87ef8651d36448cbf6cfeb4e27d11040e1fb4e3b3482c181674a41c956dc37e008d522c1e3486b78b8404065b23262c2210e800fc5f19d7103bc4b2f3d1bee6d34150b775f8cfc305b655b5d9c069db8632e8ef3331dfd467cd2fde92a171b14158838ddeab19208a2ba0f0d3b68e3cf209ae173ad80a5a6f448a2d8a2048372fca16ef89c7104dc4dad3adb2bffbca652027ac24bc209131779960057e5f32ab903b33b9ad547ab934321a92a888485fa7f900395a36969ba48e50fc95bdb21b8f91ad8db2758506161c5bf7f30e7e6dcc78d61c016778467300a9650b076ca3544f629f052034cc1443789ee9bc90eedcb95580e5298d4770a0523f2e4e95490ba9973c84360e838b22186c320e60738bb46264fd68d5bbde35a404446463e26c2c09324c69dd3f584afc2f7d2a0c8fa1cdbef735ba2d81cd50985ecddf838500fa188cd347c7c20f0c24d1f09f63632255af2ced30bb33af9c668a6b32ee02e1df42576226d2f43dd0098890cf4c289838f641977a67ef0c69e379ea3cdc0737a8d2e5d14dd0c196032b54d248a8e979599b8a255bb2b2240db64a4df740caec77b044d8c389696712679f7e6c766c1b1341e8a42c7438b0d7378abc2f2e047f1a7dc4c816b5168459cc55f3fe7a30df066f4889dc8a5681262abb77b52db72ed1ff3ae76c09453ac53ca029f4dac6f67b571fc61bab0369478c791efead53dd6c08e0709512ec931581d7abe9e34dbfb650641b3bdd57322563ccea82f1a8db05175ffd91bcf981fdfd9f36aed4986e5e9f490a60ba59520a5337283a5553f1e492d1454bf489aca33758dcd4ab32c90c663f652e73e808bea350df6a78e25b8873e6717af02732637fe39c70400db6c5928b847a3c46995a65764b0fcfd97bc5572ac74f06ecf413c5069f175eecef37a432fea95d0c8648f6fc13b91be93931cf935ae8606808dae777b3297d72b3dbabe124ac2a579945a508112fadcef0a9f1ec02c5b7a0d8a0abee18f92138b3975456cf2386faa1b2e3ec9d2b2d4546ce903659d7a0642a2ed8e9b6411a4ededbf5bb5a789e80df9acabb005ca06b012a35047340d4e03683d93502675d554cdea662160730b67be41116955e0472df6c4402d9a042f3738e1c57db68efbe20b12119c775d730fa2a6208a6a25229e7d0fda56a3f2ccf9ccaa83df3b829310d476578fbd2936429fee266a6721db6dc6149eb7673b2fe0a202bd65f40de0397beec704f4735ce5dd668c448ff52ac3ac0f8dff561ba95919689e3a1589e71a73abc8de5f5d1d33d8c7193e5239c5ee607c47879c66b6d18aa19e79b761c3e3fe95ebcc4161c0f056e6452a9a22b5f52f5320d08f7a16827a3cd36d75d584607e6eb896669b5c309bb19962af50059e0857c26a39fe41cfdcc07b6344614a79ee259b6910b89c572e17826e0f70c06c68e20ce7ee4e20593463a492876c8bc7e4212da31e87884b86e0e9664306cdc6fcaa36f79cc1db50f47390515108ee3794eb4cede63f7c31a9d4a930c091f1e8f20eb0985d0bb11f537cb8cfd806948a53eefc3c0164396162844c73ba10b079e1527d50d0dbf277aaad68d4f8abfdc6d2cc5642753cae5236ded155850e8b909af1eea010b40b6cb5b759f731d98c00ada090240b0ba0c9fe5cdb11df6ab8f56390b01d8d97e7d7774e44e679156666b4d4729a7ecae742cbcfbf952145978c6b2d0cf36b43d4f73855200c2eaafe225e581b687453e3ac28c191945a737d30b5e11b3d86d56a9d6cfc2b9ad88e1f09185b77bcf01ac6b64f4c81a6f502f4dd96d76b39ff274929f59582c4f5e6abfe17170457ba93c7c4a384e4b78d645b9656f2f14a0e8895125645c278f86681f74c4207292ffc7be67f334d6304355d5b10a850da57fc821f2f28600d52658fefa84db468124509aacc0f2cbe99deb6b72db43630495f6791aef5e462e99f658e544783edc3dc43a0b8bc16ceb54fd9f49b12e9e0569473e743fc5c97e480e096a2bc8e560d93b3be12e631c41c5467f91088073426d7f57d74822c1694627b9d7bbb107d36c3ea87c59db8bc0854732c7b538bd9d59ebb99557925a3a3017f037b3231f166c829b26dc4a9b001497eaa31dc5771841dacfd14b70ba72e318de0dc8ecf6a8aa4193364862a7dd4ae7c8f756fd30423b6ec4157edc64918c8f6f37372a3ac9bc017a0003ac02ce7bbebcb5147f783c1c11631f186e26a9d01d4c9f50f8967e55ac930d3efa871c90e048a4f0eac312771bc48b6ea9691c45eaf4b70bc017192f443b026a1867f8e12d1f8c1b53592a6429e3e0e6091b42b1596aae85b6744c7c1aafe82886c3779a76652388b4f20bfaf3d4824591d67c7a3777eefd7f0d02fc2d61dcbed3d1d39d679d2956344eb51beb3172acbb609dab0eecbe80cb408a850396801c0f5e62754dc6cefe91be159293b85353e72a168062b45e8d196011683e0f26836debaa22ea219f559e252b57234ef69c7bbdb898d5a1c5ac200527d34e79b49efc8db11d736e1819c9c4d02728b8081b96ca3833b153153f7fa41df1af9a8111782f78ea055621070761ee070b75ff53046eed7e5ee3a236cb06bd7a57d3f03832b3cde1a429aab103d103d5ff8362cff8a810fd8071ce5b6cbac4bee280b9538919b94c92c4622dbe5f098dc1e3955b9768c662a00e90fc60ce0366e0741b2f3282f1876abfd9dd9a565dd5ce3f134550154adfb9ea2a43fa46f1d2b85ac7b61cc11ad250e981730b258cca1d1f5463bfa8f82b9c6222049cb67205b598f16478a4fe891681c701e3d0d680ff1d86de633df858ce330a473d6efcd9cd9f4415bfd37f131fab658d2b1fc959a6b24feb4ceb34b92b554c683bfefe6692047d59b8bd83ff1866aa45206272a72a25c2d75f66d4d8d74a2ac9219d310fcfa412e3a75650806579084efd1dfe08aa45f2136bb26090db3d0944261ecd71a331514aee05838469010167aee348974a281f60f3a496e6bfb2f196a8ac7b446835cbc577d5f3f7c678c8cb8caef53383f7ff96b71aa548bccafb8d68881c0b08c2e7415d65e3841f552310759cea14caff8d8956dc530ed30a0fd27318ac0968db7e0ecc6ca52a285ddb15070cbd0d9743c9711f390604c707f5428b2455d006208a6ccab789254a287d755ec71a9ce9967ffa7fbb5657f3c4077d762f4df030e7460ca1dad76ebef1bbbf394868efae4fe5d5ec3c4eb78b0ea9e59b2e1bf7ba837122bd1f899c5754ab80b6f019ea9704b139ba566892ebd6e77685aae8753daa42d136c2dc229fa649bb883630c4c723f7f90ebdd7b234c40622af0e853d18d0c85fff16d54ab17b92a8695275f0c099cdcc07a69e58262eae226dd5b69711fec71ceea5c20a54d7cbba5b78d3a3fd7050628fb009a44bdbb74870a99fa5ce040877c53005ab9fddd102ee569027810715ecaf4be44268c18cee17321742e8bb38bf3d23bdf7377ebb13a377edab8dcbab76b7dc6a259cf6b947cfcccb9f8d5197538ad98599c92935b3a295b217b49b7b21d491192934db25dd44612efa1005c6b17d7142c116cda1a1d3d3051b30432d9621ebb99159e835b5052b1b214a75060197060e9ea10c81b40a27f939160ee630cbb54b25fe7959483629f6cf82896929deb8df7e14b3d7ca465c2be893c388a50e2e1bab55a9ed87298510fd640b38b7cd8dd1f75e9a51324179672cef67bc144a33d0009ffde3cda668b908f53ef386898ba6b6bfd073cf85df7ce0bcd3d62783c37e99557fa1ec578c87a3480f54f7b9df306f1d532ab4656fb249eac018742a25c1e1e8a922f820bbc83359d25204f133cf4d4369293ad15fca616a081b2c64d40a7da9281563bf1fbb56e05990224caad4309e64c246f6c5ff4e978ce74f6d30224163c4b69d3cbea0bad99bddd987b815387f57eb9a7a2e76f9fa9d8f1c8ed08016cb269f15ba80dd6ef7ae51f903c716e2ef34fe3cc2c339b26514e7253a9e0bd5a6964e0dd960f8ff59a17bb1e754db954d7cefb71051c5e0660183e9e53410d3431b304dfa934d5bcfd9d0297fe69dda9c106827cf9274be4d49e124f31b445c050780ec605c7022af618a7a34d3d027554b7e99bebf52510da677adddf21d918ca646f97a6d55ba8affa50de95fe51d3f9e3b2a2387514fc63f0962b5909265332475d9c3ebacca1ab21f178bff70725c7b518c4a96ac89cd279f59aa8f8bf57bf28b960f88f6dc6032240ad126de5f5575e371dc93c3b9c731bc20d2564f1f0c55ac33ef966acd52a004ad8073dbc11f35c7a4f4cde621c2ef878c246cfa7dfa0b4502cd91715fb4335ccc404bc7b795873a428ca72b6b39a22509d66dedb2d8a97ccd098d63c604fc6771fec038d4ffdb4af0a28b77ad9bd5c25042017e0f71735933193f4cd5e52cb3005b28f526a0e4bc042100ae7d9ffc70f1153978f6c3d2c66e53ebb3bf34534b782b02b9e66986bc8b14599687319691552f7ff8cea0ae94b5c3b58fd5da77d05566bd70314464718c55a555e87e12a4b43c050a3ac72d2565af3385b55afef6d6f08687f0008556b6522b179c31d7c76a4b5bff10703f49f7f5039fa1c7c0ae29e451464bc5eec111758c68b3b03659a7cd4fc033def6623afe64360bc81b28750002c56d73360a12a2a2e0548e6a152ed24154c46a422de860bd0040f414f379c0f3b93ee72345176297f2db67d05fc1a04ac971e0aaebf96248fe0cc4cac472b3ab9e8b179bef729208dbfa53eb4bd5a221029c98b67986af4245504878ae4a08573afd665d0dd46290384673744941d1db3ec14d3ffa7684ff6ea52cf1f673b92b1b672bc10e88318c9e18d41b78851736d8607cb89495eb0d58ef28ad4779aa0a15464a9066a5068895f5d65e61b58a7690b44c75b16c1fa30125c24e3c249ad9dfa74b3054f5f724f2d2ff3c23eaf235e38cf88072b713c24dc7fdbc51fb3d1b82555befd807b74754ad483f6e8b1b02"})
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:09:37 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:09:37 executing program 3:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0xff3f0000, 0x0)

05:09:37 executing program 6:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc04c5349, &(0x7f00000007c0))
r1 = gettid()
fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x1, r1})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:09:37 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x401, @private2, 0x1}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000040)={@id={0x2, 0x0, @a}})
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
shutdown(r0, 0x1)
syz_mount_image$nfs(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0xffffffffffffffe1, 0x1, &(0x7f0000000880)=[{&(0x7f0000000780)="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", 0xfe, 0x401}], 0x1, &(0x7f00000008c0)={[{'\x10'}, {'%{\\\x97..*^():F(-'}, {'^:$})\x95&%'}, {'%\\*'}, {'['}, {'i\xb2\xf6\xed\xee\xe7 \xcc\xe0Wy7\xeb\x8agQ'}, {'\x00'}, {'\xf7^'}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@dont_measure}, {@obj_type={'obj_type', 0x3d, '(+\xdf(*.}'}}, {@permit_directio}, {@hash}, {@fsname={'fsname', 0x3d, '-'}}, {@appraise_type}]})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:09:37 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x6}}, './file0\x00'})
r1 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0)
fchdir(r1)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0xfd48)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)

[ 2986.556262] loop1: detected capacity change from 0 to 40
[ 2986.558556] loop4: detected capacity change from 0 to 40
05:09:38 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x8, 0x100000000, 0x54a5, 0x5, 0x7fff, 0xffff})

05:09:38 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0xff3f0000, 0x0)

05:09:38 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
clone3(&(0x7f0000000300)={0x100800100, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180), {0xe}, &(0x7f0000000700)=""/4096, 0x1000, &(0x7f00000001c0)=""/125, &(0x7f0000000240), 0x0, {r0}}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

[ 2986.673404] syz-executor.4: attempt to access beyond end of device
[ 2986.673404] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2986.675109] Buffer I/O error on dev loop4, logical block 10, lost async page write
05:09:38 executing program 7:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x10400, &(0x7f0000000000), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)

05:09:38 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:09:38 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 2986.698730] syz-executor.1: attempt to access beyond end of device
[ 2986.698730] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
05:09:38 executing program 3:
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0xff3f0000, 0x0)

[ 2986.698775] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2986.898151] loop4: detected capacity change from 0 to 40
05:09:38 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x404200, 0x46)
openat(r3, &(0x7f00000001c0)='./file1\x00', 0x200081, 0x8)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

[ 2986.942517] loop1: detected capacity change from 0 to 40
05:09:38 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$inet6(0xa, 0x6, 0x400000)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1d, 0xd, 0x17e, &(0x7f0000002140)})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/kcm\x00')
ioctl$TIOCNOTTY(r2, 0x5422)

05:09:38 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = fork()
ptrace$setopts(0x4206, r1, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r1, 0xc, r0, 0x1)
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r2, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r2, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r3 = dup(r2)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r3}}, 0x58)
perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x20, 0x33, 0xe0, 0x9, 0x0, 0x5, 0xc000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000100)}, 0xb24, 0x3, 0x80000001, 0x9, 0x81, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x2)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x6, 0x7, 0x1e, 0x0, 0xe1, 0x2, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0x100, 0xffffffffffff8001, 0x101, 0x5, 0x7, 0x7, 0x7e31, 0x0, 0x3, 0x0, 0x100000000}, r1, 0x6, 0xffffffffffffffff, 0xb)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:09:38 executing program 7:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x800, 0x40)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)

[ 2987.006154] audit: type=1400 audit(1656652178.435:14): avc:  denied  { create } for  pid=14537 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1
[ 2987.026831] syz-executor.4: attempt to access beyond end of device
[ 2987.026831] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2987.028631] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2987.099758] syz-executor.1: attempt to access beyond end of device
[ 2987.099758] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2987.101723] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3003.795740] loop1: detected capacity change from 0 to 40
05:09:55 executing program 7:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x3, 0x7d6, 0x3, 0x3, 0x7})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)

05:09:55 executing program 6:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x2e0104000, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:09:55 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc04c5349, &(0x7f00000007c0))
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000140)={0x8, 0x80, 0xfffffff8, 0x3ff, 0x7, 0x3})
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r2=>0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x8, 0x0, 0xb0, 0x1, 0x0, 0x20, 0x1000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000040), 0x7}, 0x100, 0x1, 0x2, 0x7, 0xffff, 0x6819, 0x1, 0x0, 0x3f, 0x0, 0x9}, r2, 0xb, r0, 0x0)

05:09:55 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:09:55 executing program 3:
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0xff3f0000, 0x0)

05:09:55 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:09:55 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc04c5349, &(0x7f00000007c0))
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000300)="58d8d1a343e695d6462211468f2d6710ee428b312684034fda87734e06e7e62745cb4834dceb0865e4565488ada3792ad30ebea60c10c020d45b6d4fcb9afa9c13bb68e0cf85392f98fe249c24b06f13215d3b1a65db73617666ac521d8eb2f546265c59765d3faf955f2b12433ad14d8b91348691703d67374d424ec866c439ccc220708fb9d0c65a73b7bcfcb3259331eed93d8b89f306d6e1c491e58c9c32c0c0a417830b8c3ba90eafb42d40d4bfb882babf1aa4252528b7f6ce7784766867fc81ae9fb250b3a2b97799208aaa771dbf2ad0d12f256b2dc41036a8", 0xdd}], 0x1, 0x4c1, 0x4)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc04c5349, &(0x7f00000007c0))
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000900)={0x0, 0x7ff, 0x0, 'queue0\x00', 0x3ff})
r3 = openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x121001, 0x8, 0x14}, 0x18)
write$sndseq(r3, &(0x7f0000000840)=[{0x7, 0x97, 0x7, 0x0, @tick=0x4, {0x96, 0x1}, {0xb2, 0x40}, @addr={0x4, 0x1f}}, {0x81, 0x3f, 0x8, 0x7, @tick=0xb49, {0x81, 0xf3}, {0x1, 0x1}, @raw8={"030339720a374954e68ab33d"}}, {0x7d, 0x8, 0xf4, 0x4, @time={0x1ff, 0x81}, {0x9, 0x5}, {0x2, 0x7}, @quote={{0x0, 0x91}, 0x4}}, {0x9, 0x4, 0x2, 0x6, @time={0x1, 0x8}, {0x4, 0x7f}, {0x1f, 0x7}, @control={0x2, 0xc22, 0x81}}, {0x7f, 0x6, 0x8, 0x1, @time={0x61c5fd26, 0x9}, {0x7f, 0x3}, {0x40, 0x7}, @ext={0x21, &(0x7f0000000240)="ccef62c4eae2c470b1e7a573ae0f0fbefebc53587e787d4a5fcd0da72d66e7b2eb"}}, {0x91, 0x81, 0x0, 0x4, @time={0x8fb3, 0xca4}, {0x2, 0x1}, {0x40, 0xc}, @time=@tick=0x200}], 0xa8)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:09:55 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r1=>r0, 0x9, 0x7, 0x2})
write$sndseq(r1, &(0x7f00000001c0)=[{0x3, 0x7e, 0x80, 0xe1, @time={0x5, 0x2}, {0x9, 0xf0}, {0x80, 0x40}, @ext={0x1000, &(0x7f0000002540)="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"}}, {0x3, 0x7, 0xff, 0x4, @time={0xfffffffc, 0x6}, {0x4, 0x80}, {0xb0, 0xff}, @raw8={"87353367d6f18008cb8bf0c1"}}, {0xfc, 0x3, 0x6, 0x7, @time={0x7393}, {0xff}, {0xc0, 0x7f}, @ext={0x55, &(0x7f0000000080)="f0ce38bd17f2da7a0bbe34b11e99c3cdb144a2496080d65568df13b7826e0147459c50d7f9629d00342f15a3789282d4f32ee653e3e057d0706f5146c1cf5a4ac6a1f61fe7ce37a95bfd83656bdc00d41cd1bc3afa"}}, {0x2, 0x0, 0xe0, 0x7f, @tick=0xffff, {0x86, 0xfe}, {0x7}, @quote={{0xb}, 0xf63, &(0x7f0000000100)={0x22, 0x1f, 0x7, 0xed, @tick=0x3, {0x34, 0xd8}, {0x1, 0x3}, @connect={{0x3, 0x81}, {0x2}}}}}, {0x9, 0x2, 0x40, 0x80, @time={0x2, 0x7}, {0x1a, 0x1}, {0xf8}, @raw8={"3a86922b240ead54c380e002"}}, {0x80, 0x0, 0x2, 0x7, @tick=0x8, {0x9, 0xfc}, {0x3, 0x1}, @ext={0x46, &(0x7f0000000140)="ab74d1885ae48342c7e165e18dd888fd8e8a78d77095abf2d38d2fd0b4b2177962775ac8f9a48759f12c52cc81f8476a0a21dd6470738a17b39fbeafbbb2e50475a33348cfcd"}}], 0xa8)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc04c5349, &(0x7f00000007c0))
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000280))
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="04000000000000002e718147b1c32f66"])
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})

[ 3003.812116] loop4: detected capacity change from 0 to 40
[ 3003.875781] syz-executor.1: attempt to access beyond end of device
[ 3003.875781] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3003.876945] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3003.884778] syz-executor.4: attempt to access beyond end of device
[ 3003.884778] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
05:09:55 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:09:55 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:09:55 executing program 3:
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0xff3f0000, 0x0)

05:09:55 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)="aa", 0x1}, {&(0x7f0000000040)="4dfab018cbbf8425f1abe8014860f126bf7b6354e895", 0x16}], 0x2, 0x7ffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x0, 0xfffffffffffff01a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r2 = dup(r1)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0xaa, 0x9, 0x3b, 0x4, 0x0, 0x800000000000000, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext={0x0, 0x9}, 0x78093, 0x7fff, 0x9, 0x1, 0x2, 0x2, 0x6216, 0x0, 0x1, 0x0, 0x940}, 0xffffffffffffffff, 0xe, r0, 0x9)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc04c5349, &(0x7f00000007c0))
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000080)='\x00', 0x0, r3)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x35}, @remote}, 0xc)

05:09:55 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x242100, 0x142)
write(r0, &(0x7f0000000080)="066f36bd60597a184d52cc5bb850e3974a85cbb47057faa978ec8913551a1f28a068ae35921036d98554dcf0c7e52205510af4b00482a8edfc1bc825b672a7897c677e616d99b79ceefb885b27d5d656fee65e6cb92059ec2204", 0x5a)

05:09:55 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:09:55 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:09:55 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0xff3f0000, 0x0)

[ 3003.885752] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3004.004246] loop4: detected capacity change from 0 to 40
[ 3004.012297] loop1: detected capacity change from 0 to 40
[ 3004.071451] syz-executor.4: attempt to access beyond end of device
[ 3004.071451] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3004.071479] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3004.084133] syz-executor.1: attempt to access beyond end of device
[ 3004.084133] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3004.084155] Buffer I/O error on dev loop1, logical block 10, lost async page write
05:09:55 executing program 7:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
r4 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0)
sendfile(r4, r0, &(0x7f00000003c0)=0x5, 0xfffffffffffffffb)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc04c5349, &(0x7f00000007c0))
r5 = creat(&(0x7f0000000240)='./file0\x00', 0x1)
sendfile(r3, r5, &(0x7f0000000380), 0x101)
ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000300)={{'\x00', 0x1}, {0x2}, 0x1, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="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", 0x17e, 0x0, &(0x7f0000000700)={0x2, 0xf9, {0x1, 0xc, 0x12, "b10d9eb429762656f62dd1a6f0476275ddc8", 0xda, "86721182641adfb5cac55c92ab9c202d1d9275c8b1b6010797b7bcae465f5a2d54a3b0e26250f19d3036ad01a35c1bc78ba8ba5c8dea319b75c16e0c57e7225f470e368f940139911e3030073a4ea41835a164837641394d364171d966d4952fc8ab832425d1e92d1c02033c89ad91690bd332627730ac81517fde06271558f6facdf2b954bf0e058c29e58f6ab804c47289f0475340be738d5871f14aa2ef73e4eaecf1bd08ee571db156623592db685c7c9f2a79643319f44632e373aa628f1977d5799c6c6b756ffa08c2fa1333d8442f85af79f3bffd79c4"}, 0xe3, "e3bd2371e793bee1da60b114207a7a193c4734a6ac69d067aadac5c6f6cb7d96010724b442ce1538d261772ac32ff9baaf75402d3816ae4935c4408a4cb00ac3043952f453a64eea4cacb3ad7e1a703500034a83347b2d1d6bc87e06cd491b44bad49b8c83400fa80986f99b4594d27aaa3b9c3bfb0cb6d089c073c5da8c0d88ddf3548298f3dbd82e8250c49338718b95264f49181503f326dea0e89f1e7b592548d21fc5e067ac3a0cbeeadb00eecef9788b6f866cc2027166df8a6a158e040ea71c0834e7cbbef1c15b6fe2ce5b6440ebc787ceaab395790d52027034e51c307601"}, 0x1e8})
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)

[ 3004.194501] loop4: detected capacity change from 0 to 40
[ 3004.318648] syz-executor.4: attempt to access beyond end of device
[ 3004.318648] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3004.318674] Buffer I/O error on dev loop4, logical block 10, lost async page write
05:09:55 executing program 6:
syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r0=>0x0, &(0x7f0000000380)=<r1=>0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0), 0x3}, 0x0, 0x40012160}, 0x1)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index, 0x8, {}, 0x8, 0xe, 0x768f778e37842972, {0x0, r3, r4}}, 0x1ff)
r5 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
openat(r5, &(0x7f00000000c0)='./file1\x00', 0x234a41, 0xc)
r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000200)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x2}, 0x20, 0x4, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8)
sendmmsg$inet6(r7, &(0x7f0000001b80)=[{{&(0x7f0000000000)={0x2, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0, <r8=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000009c0)={{r7}, r8, 0x16, @unused=[0x9, 0x100000001, 0x0, 0x4], @subvolid=0x100})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000001c0)=r8)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:09:55 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0xff3f0000, 0x0)

05:09:55 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:09:55 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x240, 0x140, 0x10}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000bebcaedb286850ba812ffdcd7d32a4cfa80543305ba022d215118306a6c7389f06328cf8bbbb9f77f5e1f6cbdf82a1ed00608b31cbf3b223918f5e62b4e992189a7f62a6dabb05be2411952b324cd1e2c73d833a30bc2d38a79014e91eacd332c72d054eda9d8b47b25c", @ANYRES32=r0, @ANYBLOB='\x00\b\x00\x00\x00\x00\x00\x00./file0\x00'])
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

[ 3019.618896] loop4: detected capacity change from 0 to 40
[ 3019.626275] loop1: detected capacity change from 0 to 40
05:10:11 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0xff3f0000, 0x0)

05:10:11 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})

05:10:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:10:11 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:10:11 executing program 6:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
syz_open_dev$vcsu(&(0x7f00000000c0), 0xd790, 0x800)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc04c5349, &(0x7f00000007c0))
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)

05:10:11 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7f, 0x1, 0x7, 0x81, 0x0, 0xffffffffffff0f37, 0x20622, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000040), 0xc}, 0x446c7, 0x9, 0x2, 0x0, 0x7, 0x5, 0x9cf, 0x0, 0x3, 0x0, 0x6ee0}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x3)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/80, 0x50, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:10:11 executing program 7:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400)=<r1=>0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc04c5349, &(0x7f00000007c0))
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r3, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001c80)={{0x1, 0x1, 0x18, <r4=>r1}, './file0\x00'})
r5 = dup(r4)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0x2}}, './file0\x00'})
r7 = open(&(0x7f0000001780)='./file0\x00', 0x2, 0x10)
r8 = syz_open_dev$hiddev(&(0x7f0000001a40), 0x94, 0x38ba02)
[ 3019.691799] syz-executor.4: attempt to access beyond end of device
[ 3019.691799] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3019.692832] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3019.697738] syz-executor.1: attempt to access beyond end of device
[ 3019.697738] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3019.698771] Buffer I/O error on dev loop1, logical block 10, lost async page write
io_submit(0x0, 0x9, &(0x7f0000001c00)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x8, r2, &(0x7f0000000000)="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", 0xfb, 0x3f, 0x0, 0x1, r5}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="08acd6ce721c6b93b330a4e5b4f4e792d1be047be13f25cf4880c717a38aab8bb60512d98486b287e01248b45c75f6dbd0bab374bf27555973d6b2ae20fcbeb9f0cd1888729e06301530de685cec9b3c4b1c15d4a8ab3931b8d150fff0c7bae85dacced109ee30a6f071da7facdb39c6f8106fc4bd715966c42614d819f50ed25b672ac415725abdc814c71d325202467502fe34ab09ffb38ca1470132a7e60145c09a688bfbb53468a945ecd498e1ee8b1c84228d6d5798b8338685049f6426eecddb3d0dc9f6c753c3fea6ad878f97b43fe34fe0035e8fe94c436de081", 0xde, 0x1f}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0xc97, r1, &(0x7f0000000300)="922d03194b92d67a664ee50ae74f67ff2493d350a60299bff51e9e820488a6db3504e7f84a345fa6f31bf9bdcc44c6bc76cde21c15ab50b48e5dad112fb23238b19ab67b28a39462a2146b4668298f3ffe2f8e8227662adc5dd1717001880f12a4f7b37fee49e506ae0ef2440066205217b1d1984662500662f4bfa2e9c9e24adc1ae5b273107b23f1d61962fc3234a5b0cc14c8e25d363af9f59596d207f5411fc41986bfc91c5278e112f9640318a56d7c6ca1be4b0170351f", 0xba, 0xfffffffffffffffc, 0x0, 0x3}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x5, 0xbc, r6, &(0x7f0000000740)="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", 0x1000, 0x47f0000, 0x0, 0x1}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x11, r7, &(0x7f00000017c0)="29e260558fe40b83ff0e0621360ea5b35d72baf0999bc6791ed793cb181486994320420f314a54fa76d9f1", 0x2b, 0x0, 0x0, 0x2}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x5, 0xfe01, r1, &(0x7f0000001840)="f47b2e4f46de0b5888782d2c6755162c1c1e2163125f71f9fe60187f75ad7ef14233f55822724e2f62f777a01d92065bef7a871b2115feca3cd8d75b6a7b166f5ed6ae40d3f76d68f34168952a9aeeca573dc8a595cdd27182f9a7e1294152ad4012dfa792f496d494fad31333cdcb8f2bd5e06e90c6", 0x76, 0xfffffffffffffffb, 0x0, 0x2}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x5, 0x7, r0, &(0x7f0000001900)="73d10627f7fb451539dda1b7818eb5007223d04f14952a8fe1f42bae75515614d3d2b72281bfa583454f207750deed97a2275357749d674e62beb66a1801108d2bf63fc7da32687f30993790b67bfda5c83895a31529cd1e535b9bc5cd50b9058cd7cb1baeecc5f88089aed0a922113bbbf16b9495dc40fd09014b1d0726d46901de6f38dc451f0d03c33d1957ed599697e91c5c458f00341ffb07b2e738dc816d4db3e1a4ab77499893e8a735a7f889cd3a6002917994d27543de8f4c9b90a9363bd5c9a239a6f594ff06b5dfa3f19f8ffe6bf267b4bfd1dd75592cc8e10068ad0ed1ee962a5d020fccbf0bbbc7d13982a2fe65b8adb9d4e4", 0xf9, 0x2}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x1, 0x8, r8, &(0x7f0000001a80)="7511b16f3e4f9bd0a6ea5ac26485610110585e4fa6b3a6b9c6c1e68b3175e08dd9afc69ea1aea441cc1bb76a6f6a94ce74ddc6efafb10f9471e34f1bbcf2e72f8e2e612e1bdd01d556b7e4b26c6f0b161d88e4602768e39b4b3369aeb6361056fd2e1a398a3816af543f86cd35ef63817a28dc24cc8a431f48679e822c36b9160f8864", 0x83, 0x4, 0x0, 0x3}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x80, r1, &(0x7f0000001b80)="c563edbf60626907d152d73864d3b4e4031566774ba9c5f294d9197f2b95b9fc9ac9a6ea9640cd4ed754c3aff1a0157a7ba70df3e04b95c0", 0x38, 0x5, 0x0, 0x3}])

05:10:11 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000300)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:10:11 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3019.819923] loop1: detected capacity change from 0 to 40
[ 3019.895058] syz-executor.1: attempt to access beyond end of device
[ 3019.895058] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3019.896071] Buffer I/O error on dev loop1, logical block 10, lost async page write
05:10:27 executing program 6:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r0 = clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r1 = getpgid(r0)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x3, 0x4, 0x7, 0x7f, 0x0, 0x6, 0x80100, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f00000000c0), 0x8}, 0x2080, 0x2, 0x5, 0x8, 0x638, 0x101, 0x2df, 0x0, 0x1, 0x0, 0x7}, r1, 0x0, 0xffffffffffffffff, 0x9)

05:10:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:10:27 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x68000)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000007c0)='ns/net\x00')
dup3(r2, r3, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r4, 0x0)
recvmsg$unix(r0, &(0x7f0000000640)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000040)}, {&(0x7f0000000300)=""/139, 0x8b}, {&(0x7f0000000240)=""/40, 0x28}], 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=<r5=>0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="10000000eb7357fd49379bd901000000"], 0xa0}, 0x2)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x20009}, &(0x7f00000004c0)=""/79, 0x4f, &(0x7f0000000540)=""/219, &(0x7f0000000640), 0x0, {r5}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:10:27 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = fork()
ptrace$setopts(0x4206, r2, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x7, 0x3f, 0x8, 0x5, 0x0, 0x0, 0x932a8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x5183a, 0x4, 0x10002, 0x9, 0x7, 0xfffff4ee, 0x8, 0x0, 0x3, 0x0, 0x1f}, r2, 0x8, r1, 0x1)
kcmp(0xffffffffffffffff, r2, 0x4, r0, r0)

05:10:27 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r0, 0x0, 0x0, 0xff3f0000, 0x0)

05:10:27 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r2, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r2, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r3 = dup(r2)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r3}}, 0x58)
ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000700)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
clone3(&(0x7f0000000300)={0x204000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3d}, &(0x7f0000000100)=""/79, 0x4f, &(0x7f0000000180)=""/126, &(0x7f0000000200)=[r1, r0, r0], 0x3, {r3}}, 0x58)

05:10:27 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:10:27 executing program 7:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
dup(r0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x2, 0x2d, "ddd1171beb63158a4725b642c4df3186e7c1aac8ffba58b570bbeaea34bf66238519aece8968157b012fb117b1"})
clone3(&(0x7f00000000c0)={0x10000400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/198, &(0x7f0000000640)}, 0xffffffffffffff16)

[ 3036.245860] loop4: detected capacity change from 0 to 40
[ 3036.248367] loop1: detected capacity change from 0 to 40
05:10:27 executing program 7:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x400040, 0x20)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc04c5349, &(0x7f00000007c0))
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc04c5349, &(0x7f00000007c0))
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0xdf}}, './file0\x00'})
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[r2, r3, r4, r0, r5, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0], 0x9)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)

05:10:27 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r0, 0x0, 0x0, 0xff3f0000, 0x0)

05:10:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:10:27 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:10:27 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000700)="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", 0x101}, {&(0x7f00000000c0)="4f84ff745577148727c86ee8a83521749bebed77541c8903f62fdd40d6f7b54b3ac1a4bedc2947711945e28c3588241c1ffd677ebb3ff2c8e85b4c1bfdedfb2e0655a9aae02e9037cca7df6871c51ea259605a587a2242eb6410f404976730ae0bd494f93ca70c79226300bec1", 0x6d}], 0x2, 0x7fffffe, 0x0)
lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=@ng={0x4, 0x0, "be"}, 0x3, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
syz_io_uring_setup(0x1fc2, &(0x7f0000000200)={0x0, 0xcb0d, 0x2, 0x1, 0x1f}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000340))
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r2=>r0, {0x7a}}, './file1\x00'})
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000001b80)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r2, 0x10000, &(0x7f0000001b00)=[{&(0x7f00000003c0)="edd434387761f9942033e214d8fd65741ff61aca29d6d80878658d849f3c26e7bb0795270a0968eeec8e6a74901298e55d2c", 0x32}, {&(0x7f0000000840)="d803869693e037e1d9ac291313393150f7a0d5a24966fb73b808c6564b7430e9677cf1b66fa498275229c7282184e19119a80f97d048f482f9f7c1c4772725718dffe3c870f4851ca88ae305fd55a13d89d8ea58f405fa2ee094bd822ef7ad2642196ab979752e1ef478b270c8f3c20b3002dc5246d36c5353bb7f24388d3404dc6f7b3e6a01702f404113b2d92b022773cdea0683f424003165e3435e7342713e56ee68421c6063229c18717acb321ea8cc557014e5381a6688012b92ed11b2f2e2c1fcd4935883b6e691", 0xcb}, {&(0x7f0000000940)="d7c66905ac2d77c0997702a9477368d6f9f21fd2323cbcf13d6c95dc6e44f37fb6b6d59191f04cbd54acbf707aac982fe32d8cd631fc562cdabd9aba73ae55902955ea08245569a9be0cfd8722b5f86194b9617b9ac64cbed492b7b77515da4ae986607b03197edd8c405d739d63130efc35aea2ab05c7ae89ca7aaf42fc851ce6029ad470fd0e5281baa4cda6020264d35c7c7ca0d3b44021f81bdbc3c4d8d8a28e54d351366159dda0e4121a0cd0224b3c2d72ed40633ad804bb846a8af8cc8771ace8e99da16bc031323912237c4f97bab7dd77705f84f673921fce1209820868b91344", 0xe5}, {&(0x7f0000000a40)="5154e065e2c39faecf86318ac650e6152d7d3e1e8bae29c7bd41b02d5d748912cd987d7016a9ec2fd24685d35774d2a56a3e6be147daae793fad8c053ba0f81da377bfe866", 0x45}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="b6fc", 0x2}], 0x6, 0x8, 0x1, {0x2, r3}}, 0x9)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:10:27 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0xbdcaf37082068e2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x8)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)

[ 3036.354897] syz-executor.1: attempt to access beyond end of device
[ 3036.354897] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3036.354924] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3036.363412] syz-executor.4: attempt to access beyond end of device
[ 3036.363412] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3036.363433] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3036.513529] loop1: detected capacity change from 0 to 40
[ 3036.584897] loop4: detected capacity change from 0 to 40
[ 3036.589096] syz-executor.1: attempt to access beyond end of device
[ 3036.589096] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3036.589120] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3036.703834] syz-executor.4: attempt to access beyond end of device
[ 3036.703834] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3036.703881] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3051.859598] loop4: detected capacity change from 0 to 40
05:10:43 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r0, 0x0, 0x0, 0xff3f0000, 0x0)

05:10:43 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:10:43 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x1, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r2 = dup(r1)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58)
ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000000))
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})

05:10:43 executing program 7:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000840)=[{&(0x7f0000000080)="f8bd52077b509cef1abc006e79e719631d1accd06d887f67e4aec673ef18420667fe46bfc21584e7e5e61ddbd53a23f43851ca531553ab4aae634823ffb868952e3ea9ad5a62adcfe4fbcafa75e86b336b4245a28b452ba6615bcc8324c986470135dc9b6011f9f99fb76a376065", 0x6e}, {&(0x7f0000000100)="e51d01fac152ff79f196b49d5745fa31dae4f294c447e8825c2b45f4ba8bc3e9ca70de3780046b46", 0x28}, {&(0x7f0000000140)="6de6968fb4f4e480dd67a55ae9fbfbe710234a24e7a9e14d6afaaf345d53e332460b8b451daea5b624412b4743a1a2b992cd9568bf3298b65febba026d653f259e3194039b9d383b86acffafeec0ac454e21a64c6bd84edf7633319e9a2d791ea100201f8916ded0e4b2433778359926866e943fa9c29e7b1d67569f3a5a3a01601d", 0x82}, {&(0x7f0000000200)="c528f31ac7dd75489b83e1ca564d52bdb45591d8e5948862522bad61ab2889851c67f1dca7653d57b24eab219ec38a0417a06bd53627a9702fd6a3b704250a4ad02f1efe9d342cef22e68bb6dc7b13090644d8d8a73000bec607a247a5392a2b8fae0f14a9fe7a6a0ead3c2368910187f15fb67864904e104bd505af2565d1dbe3196889a019cc47a418a9ba034a84d278faabde96039b1987f97804b4edfe8ec475367e3bbf77d69ca118d2d5f8b070c846eee0496a2723a84084eecbcdb2b46cc54d", 0xc3}, {&(0x7f0000000300)="8446736f431df74ab30297b36153c91dbed7262ca7b16e00b9382deb5185dbe0df3b91143bb5394bbbe26ea1f95692e087b7b33120259195391fb9be7b21b3fcf0b89128006c7be514bc2ef8930a7ad71263844f418c8bab09b57c271aeb8ec749f174dac7e4812816625e3d3c4a7111fc36f7d5cc83520dbb48571f1cbc72254166709d508bd167432517a19ca67d0518dab695d5a3f9e2e31250c607ee5d8e15e7dba2dddc6b9a717bf6e3", 0xac}, {&(0x7f0000000700)="f3acdeb331adf48bfec040319fba1825337449db454bed1b58d1132186a4adb5477b2713283d73414b4cb9ae135bbdd88fa25384be59de1c3516e4abc670f7d13a39696c503e6f18d02a8b55badbb32731ed844eed343f7a8eb77d244afccdb0b1f35250f5dd2ab387ffa7e61790c9f82406b9d20d3dcbfb93e7631a7b554c34103e321fc45b47407e69698725c63a82da2328596cc4eebbfa546bb86f1d67dcb56955f7b6c631017e80b2f46a7f3f0a29c5d310ca9e6332d817e1045b9d4d1c", 0xc0}, {&(0x7f00000007c0)="6a927cc704a0b22d402f22ef8ea98a32cf1e5b3a1891b77de6d33d841211609ba172fd6da9392b084d0abb6384f24eb35e98602cf14ba09767e19eec82e5f0681389038805f51f8ee3e8bf6bc8fe4a5e2c5e534cb81603d7e19c75f040cfa4a3207efd4f1326a3a2423f8442e2e2379d0e9fde19ef5554", 0x77}], 0x7, 0x7f, 0x9)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000003c0))
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)

05:10:43 executing program 5:
ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)=0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:10:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3051.890306] loop1: detected capacity change from 0 to 40
05:10:43 executing program 6:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
getdents(r1, &(0x7f0000000700)=""/4096, 0x1000)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:10:43 executing program 2:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc04c5349, &(0x7f00000007c0))
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x1, 0x1})
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x2f, 0xb, 0x6, 0x6, 0x5, 0x3, 0x3e, 0x4, 0x389, 0x38, 0x2dd, 0x1, 0x9, 0x20, 0x1, 0x5, 0x4, 0xd2be}, [{0x7, 0x80000000, 0x3, 0x4, 0x9, 0x7, 0x7ff, 0x3}], "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", ['\x00', '\x00']}, 0x1258)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400)=<r2=>0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2280a85, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose}, {@cachetag={'cachetag', 0x3d, '\''}}, {@version_9p2000}, {@access_any}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/snd/seq\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}})
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

[ 3051.937494] syz-executor.4: attempt to access beyond end of device
[ 3051.937494] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3051.938567] Buffer I/O error on dev loop4, logical block 10, lost async page write
05:10:43 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc04c5349, &(0x7f00000007c0))
writev(r1, &(0x7f0000000380)=[{&(0x7f0000000000)="c8d03175e83fb3b39d22ae384aba3eba3ed73f54f04fb9ddf2df3f5cb5bf1f6a918918ba42fe7fdcaf16dd0b330e0997e5b5ed918b98519f75b104e585000b96d48750912f298163a90e31d545838ccd048ad5ee91d5bcb6d4c53d3832e2d5d4666d818019d687fb9932c379f0678d1743de5dc1bfc6a716232ea5126e54563e81255f09b797ccc192b8922ee60e5dd2a6fad851a70369bb42584851164f09e33d7c5f3fd813466d3e76c44db0f44be261d3681b6c8cecc7a7d08d2583424e2065a6f3c48e8a0592c5ae7f85623a20000000000000000000", 0xd8}, {&(0x7f0000000100)="62e6c5e96949208f459083070e287f460f3e147cfe93ae853ed7560e3b3a36af23789a1358970638c32c4996285d3860cc36fe40f570619d0cb7b6ae990853f0b04df3dd2b9d5dfc01df3610beba92a01e882073add84a6e1f93db3b5f3bef", 0x5f}, {&(0x7f0000000400)="e317a1b86b8722606813fc9c2be81a8b95c70d89cab529a281c7e770cb99d59025b6dbcec807db5d46c76d4040f1bf4e816766e86ab8089e010001d0140ea903f10e17a3f8a1a2317945fb3bffbb889c1ec52ae12a03c299f5a1870680559b453fbfcda7bc4438825970f85abe24e69f7ed924e4fa524bcb939f9dd2f0e8de70777d480c8ef4c87a064d6755e1b94e4f60f8cea32f21c4dec322ccb6e51d578e3ccd196b13785700801ecf77bf46de151a125c8a265758934ceb5a3bb8ec8a7d9a234712f5d05140d6f0e2448791e86fc18ec55f04ebce10ad6c605b42ea910a77d80dfb286f", 0xe6}, {&(0x7f0000000280)="8fa7584e6349923166a9e70b5131669190e882b07a57e84beae63deaf6d05f30166499bb1854e342ab557f93d8fc4a6052a4be18099424b7c9486151188fdc65fe346d8850", 0x45}, {&(0x7f0000000300)="90ddbb409e685535650a1e04e390cfdff5b20e1cf72a1624b94d7f9da78364ff91bc2858ee071ddec5b7ad1f42b80c89f3cd91892c3b8318ccac3fe54088a7b499b231bb32ec1b584b9537569a1ed20dc4587caad50e3e1044be98f756c8745340916669f847ff79e23e526db8", 0x6d}], 0x5)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})

05:10:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:10:43 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r0, &(0x7f0000000180), 0x0, 0xff3f0000, 0x0)

05:10:43 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3051.973490] syz-executor.1: attempt to access beyond end of device
[ 3051.973490] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3051.973513] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3052.074901] loop4: detected capacity change from 0 to 40
05:10:43 executing program 7:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400)=<r0=>0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x10}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x100}}, './file0\x00'})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x480201)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc04c5349, &(0x7f00000007c0))
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc04c5349, &(0x7f00000007c0))
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r1, r2, r3, r4], 0x4)

05:10:43 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x800, 0x1)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r1 = syz_io_uring_complete(0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, @in_args={0x2}}, './file1\x00'})

[ 3052.151057] syz-executor.4: attempt to access beyond end of device
[ 3052.151057] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3052.151082] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3052.165604] loop1: detected capacity change from 0 to 40
[ 3052.262827] syz-executor.1: attempt to access beyond end of device
[ 3052.262827] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3052.262871] Buffer I/O error on dev loop1, logical block 10, lost async page write
05:10:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:10:43 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r0, &(0x7f0000000180), 0x0, 0xff3f0000, 0x0)

[ 3052.317529] loop4: detected capacity change from 0 to 40
[ 3052.399052] syz-executor.4: attempt to access beyond end of device
[ 3052.399052] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3052.400309] Buffer I/O error on dev loop4, logical block 10, lost async page write
05:11:00 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:11:00 executing program 6:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000180))
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x1e, 0x0, 0x0)
shutdown(r2, 0x0)
setsockopt$inet6_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000700)="6624e8f91869f7aadbcb1f7fce9a1c71ac46f389a5e2b4e0e745f7f2fea0690b3efea8ea4616ed0a482820c897752c6ef2aa17c98c04f660f3c6396baa3c53d563d299943ad8dc4364a8c67999065ee7ece2056a6d995362f5fdaab8c9b66de4425e167633ef60747ca12cf63f8cca49923a6ddb90804262b3992360c759299d9133f55f6ed7e57f4dd6d944d7b1435521a6c5fb56880a740bb48448c2ba920a3433d69ee12003620512f72a2000ad22c7a40a5a1affc8219b81d465754560dc3323801bee20ac3ffc098720a5afccf293bbba0491c51a83f9fe07a7073ffd04e43c7478b3b8f3eadad911c453162adc4f210fab", 0xf4)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:11:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:11:00 executing program 7:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10001, 0x3, &(0x7f0000000200)=[{&(0x7f0000000080)="c9df9207d3160888688f23b9b7a6b2c9a067510b4eee2c67966663acedd64faa72c475aab8c0fc3b413ffb46049a2d4f284b1aed38b943de078abc8edd147a06d22b97d74bba551779e328414813b5c5faf13661e746dd6a822e18ce8db89f28bfe8e1cdb73178b592552d54", 0x6c, 0x1}, {&(0x7f0000000100)="ea21a5dbe529c0e4f7b1330e189f62827490b0343024d4e312f6732cfa26a546bf4682d641efa714f48b56df71667eed2811b06ac0f292301cc0f516589aa8a16de406c5dd1f07016c429e22f864b46942e72d6cb797fa775b12e19e6b", 0x5d, 0x3}, {&(0x7f0000000780)="66301773318261b0b87b519abb24abb5dc11788162936cb3fbf028dfd31d923d9745d250dbc2774f1542ed5aadfdd5358312e5db95cf877d91be116e71e359212bc42474d227c238b08d65dd0e9499b827a0308bdaf50c4229e0056eda92be0cf5dcd814d01a53404734fe8583592ecb830ad0a3067aa9f2f36bce91fb975547", 0x80, 0x44d}], 0x1, &(0x7f0000000300)={[{@jqfmt_vfsv0}, {@nodelalloc}, {@grpid}, {@noacl}, {@nouid32}, {@sb={'sb', 0x3d, 0xe80}}], [{@pcr={'pcr', 0x3d, 0x3a}}, {@euid_eq}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fowner_eq}, {@obj_type}, {@subj_user={'subj_user', 0x3d, '--'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@dont_appraise}]})
flistxattr(r0, &(0x7f0000000700)=""/109, 0x6d)

05:11:00 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x4, 0x1d, 0x18, 0x17e, &(0x7f0000002140)})
ioctl$KIOCSOUND(r0, 0x4b2f, 0x800)

05:11:00 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r0, &(0x7f0000000180), 0x0, 0xff3f0000, 0x0)

05:11:00 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
getpeername$unix(r0, &(0x7f00000001c0)=@abs, &(0x7f0000000040)=0x6e)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_config_ext={0x0, 0x4}, 0x2040, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x401, 0xfff}, 0x0, 0x0, 0xfffffff9, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x8c}, 0x0, 0xffffffffffffffff, r3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r3, @ANYRES32, @ANYRES32, @ANYBLOB="2e2f2095a5a56669"])
ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./film0\x00'])
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc04c5349, &(0x7f00000007c0))
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000340)=0x8000)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x2, 0x6, 0x1, 0x3, 0x0, 0x5, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30e0, 0x1, @perf_config_ext, 0x1806c, 0x1, 0xfffffffc, 0x2, 0x101, 0xfffffffa, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, r1, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000880)={{}, "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"})
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000380)={<r7=>r3, 0x100000000, 0x5, 0x2})
sendfile(r3, r7, &(0x7f00000003c0)=0x2, 0x788d7829)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
fcntl$setpipe(r2, 0x407, 0x80000001)

05:11:00 executing program 2:
timer_create(0x7, &(0x7f0000000140)={0x0, 0x34, 0x1, @thr={&(0x7f0000000040)="1bc6b3eaf5e5a0eba8534c495598b8ac07a0356d9f0183432db8148179d9117fb97fa61fe65f1a67cd49a48d5ade1540a53437087f3718b30560aa12ee90d7ba6ae6485135a0b0d26e6e1cf84e62a867406754cd79369d76123070d2515a6ed9", &(0x7f00000000c0)="ad938927134faf505542dfffe21c8fac4a4b9895a38bce03023bb51ed84e41f1911bcffc19301bcb373d739bd7752f85276f429b0bbb1f2bd50d9c1b1a95f4031f549ed7d5fa3423455d90e4e2f8f894f6d91c664378953115f3d2d55656b226a64c154800b6ac4032d85314"}}, &(0x7f0000000180)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {r1, r2+10000000}}, &(0x7f0000000240))
r3 = getpgrp(0x0)
timer_create(0x3, &(0x7f0000000000)={0x0, 0x19, 0x4, @tid=r3}, &(0x7f0000000040)=<r4=>0x0)
timer_delete(r4)
timer_gettime(r4, &(0x7f0000000300))
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r5, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r6 = dup(r5)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r6}}, 0x58)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400)=<r7=>0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r6}}, 0x58)
clock_gettime(0x0, &(0x7f0000000840)={<r8=>0x0, <r9=>0x0})
ppoll(&(0x7f0000000800)=[{0xffffffffffffffff, 0x4}, {}, {r7, 0x1013}, {0xffffffffffffffff, 0x182}], 0x4, &(0x7f0000000880)={r8, r9+10000000}, &(0x7f00000008c0)={[0x400]}, 0x8)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

[ 3069.194499] loop1: detected capacity change from 0 to 40
05:11:00 executing program 6:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
openat(r1, &(0x7f00000000c0)='./file1\x00', 0x20200, 0x100)

05:11:00 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r0, &(0x7f0000000180)=[{0x0}], 0x1, 0xff3f0000, 0x0)

05:11:00 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
sendfile(r1, r2, &(0x7f0000000040)=0xfffffffffffff3bb, 0x401)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:11:00 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3069.240468] loop4: detected capacity change from 0 to 40
[ 3069.299677] syz-executor.1: attempt to access beyond end of device
[ 3069.299677] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3069.299706] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3069.352108] loop7: detected capacity change from 0 to 128
[ 3069.352982] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
05:11:00 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0)={0x77359400}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r2 = dup(r1)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58)
write$P9_RREADDIR(r2, &(0x7f0000000100)={0x2a, 0x29, 0x1, {0x478, [{{0x20, 0x2, 0x4}, 0x0, 0x6, 0x7, './file1'}]}}, 0x2a)

[ 3069.421955] loop1: detected capacity change from 0 to 40
[ 3069.425905] syz-executor.4: attempt to access beyond end of device
[ 3069.425905] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3069.428489] Buffer I/O error on dev loop4, logical block 10, lost async page write
05:11:00 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x80, 0x8700, 0x0, 0x6, 0xffff, 0xff7f})

05:11:00 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r0, &(0x7f0000000180)=[{0x0}], 0x1, 0xff3f0000, 0x0)

[ 3069.495407] syz-executor.1: attempt to access beyond end of device
[ 3069.495407] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3069.496512] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3069.623062] loop7: detected capacity change from 0 to 128
[ 3069.627970] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
05:11:14 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/virtio-ports', 0x1, 0xa)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x101, 0x7ff, 0x8fab, 0x2})
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0xb, 0x17e, &(0x7f0000002140)})

05:11:14 executing program 7:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x7f, 0x3, 0x0, 0x1, 0x0, 0x200, 0x21400, 0x15, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x10000, 0x40}, 0x4, 0xffff, 0x5ee, 0x9, 0x9, 0x4, 0x1f, 0x0, 0x7, 0x0, 0xd58}, 0x0, 0x9, r0, 0xa)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)

05:11:14 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000240)=<r4=>0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0xd0, 0x2, 0x0, 0x0, 0x8, 0x8000, 0xf, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa61, 0x1, @perf_bp={&(0x7f0000000040), 0x7}, 0x11500, 0x1, 0x9, 0x5, 0x7fff, 0x1ff, 0x1, 0x0, 0x9}, r4, 0x1, r3, 0x2)

05:11:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3083.471921] loop1: detected capacity change from 0 to 40
[ 3083.475118] loop4: detected capacity change from 0 to 40
05:11:14 executing program 6:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
openat(r1, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:11:14 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:11:14 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400)=<r1=>0xffffffffffffffff, &(0x7f0000000440)=<r2=>0x0, &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x4147, 0xe650, 0x8, 0x4, 0x401, 0x63})
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r3, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r4 = dup(r3)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58)
perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x7, 0x1f, 0xc1, 0x2, 0x0, 0x0, 0x80, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7, 0x7f}, 0xd143, 0x9, 0x3f, 0x5, 0x8, 0x3fe, 0x7, 0x0, 0x1, 0x0, 0x5}, r2, 0xa, r4, 0x1)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000040)=0x1)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:11:14 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r0, &(0x7f0000000180)=[{0x0}], 0x1, 0xff3f0000, 0x0)

05:11:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:11:15 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:11:15 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0x0, 0x0)

[ 3083.557146] syz-executor.1: attempt to access beyond end of device
[ 3083.557146] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3083.557238] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3083.561657] syz-executor.4: attempt to access beyond end of device
[ 3083.561657] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3083.561692] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3083.688721] loop4: detected capacity change from 0 to 40
[ 3083.691408] loop1: detected capacity change from 0 to 40
05:11:15 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc04c5349, &(0x7f00000007c0))
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x90002000})
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r2, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r2, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r3 = dup(r2)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r3}}, 0x58)
ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000040)={0x5, "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"})

[ 3083.767813] syz-executor.4: attempt to access beyond end of device
[ 3083.767813] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3083.768864] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3083.779718] syz-executor.1: attempt to access beyond end of device
[ 3083.779718] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3083.780712] Buffer I/O error on dev loop1, logical block 10, lost async page write
05:11:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:11:15 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:11:15 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:11:15 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
stat(&(0x7f0000000040)='./file1\x00', &(0x7f00000001c0))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:11:15 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2917, 0x8001, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

[ 3083.911711] loop1: detected capacity change from 0 to 40
[ 3083.984860] loop3: detected capacity change from 0 to 40
[ 3084.102671] syz-executor.1: attempt to access beyond end of device
[ 3084.102671] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3084.102715] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3084.166919] syz-executor.3: attempt to access beyond end of device
[ 3084.166919] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3084.169010] Buffer I/O error on dev loop3, logical block 10, lost async page write
05:11:15 executing program 7:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x8, 0x7f, 0x80, 0x8, 0x0, 0x9, 0x8024, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x10001, 0x8}, 0x8020, 0x0, 0xa6, 0x5, 0x100, 0xfff, 0x0, 0x0, 0x2, 0x0, 0x10000}, r0, 0x8, 0xffffffffffffffff, 0xa)

05:11:15 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
ioctl$VT_WAITACTIVE(r0, 0x5607)

05:11:15 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3084.520543] loop1: detected capacity change from 0 to 40
05:11:15 executing program 6:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x80000, 0x68)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:11:15 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:11:15 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r1 = dup(r0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r1], 0x1)

05:11:16 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r1, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc04c5349, &(0x7f00000007c0))
dup2(r2, r1)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:11:16 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3084.593530] loop3: detected capacity change from 0 to 40
[ 3084.686052] syz-executor.1: attempt to access beyond end of device
[ 3084.686052] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3084.686098] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3084.811409] syz-executor.3: attempt to access beyond end of device
[ 3084.811409] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3084.811460] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 3084.979655] loop1: detected capacity change from 0 to 40
[ 3085.150172] syz-executor.1: attempt to access beyond end of device
[ 3085.150172] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3085.150407] Buffer I/O error on dev loop1, logical block 10, lost async page write
05:11:32 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x50)
ioctl$VT_WAITACTIVE(r1, 0x5607)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc04c5349, &(0x7f00000007c0)={{}, 0x0, 0x0, 0x13d, {0xbc}})
dup3(r2, r3, 0x80000)

05:11:32 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:11:32 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3101.496431] loop1: detected capacity change from 0 to 40
05:11:32 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc04c5349, &(0x7f00000007c0))
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x90002000})
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r2, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r2, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r3 = dup(r2)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r3}}, 0x58)
ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000040)={0x5, "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"})

05:11:32 executing program 7:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r0 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, 0x4, &(0x7f0000000180)=[{&(0x7f0000000080)="c542bc4f89ffea4980302e81e9070558fb08bcc4a32013d91c38", 0x1a, 0x80000000}, {&(0x7f0000000700)="17ba72547fc051d91e47833ccbe1ad787bcbf10f3374586689b913206ae78f646a6a5d27065453002f46b2df22a91534f0e58b40fc508256e03cd2424f70f8ba740d58ba5cdef906280c7d3387c900339dfc915b37a1f060dbba537b63951a2dd7d1241e17c20296f6dbddc830ce0169309c1a674abbb35041a3f7d7f365d436befd06104c185efb2bb07285f141272b1a114881535821c0d7bb810fb71bb15872114842532ed031d7217255b3822f7fd4cf1386ba69b6ebe80b69de97c01bdb984a807cfcbecd989df288ea537ccfc44572c054838552c17030a00873fe14bd15933e5756e67f02380a01114fc575b2901dcb6fa308b4fcd25634820df98773d787598b233ceef466750f8c64484fd26e7f86d7405b6f42f679e3e007d6e64810c659e40b51ce7459eab1a584107a45667f4fccb85625675f53c05b2d5110dff889f48de5b9c6a91a1f336905da2555a16f6e760ff67ab9ffb3209a8d9cf7c3b50a3f761bb49955e812279b4832ba321805deefa53ef3f54d9093db84aa95541d3478450b7048aff164bea30bdd8ce65323c48891ea1e08872b373281f82796ab0ad47ad7fc599057ccdf6638d6e6258282c65dc1058f15a788cca9a60a88284c9ab8145181d8e543b1bb35b40ba22f8b28ab203d30c7a292e5f142ddb02871a432f1ca9482f476dc38bf5e4119fc44ef28e87ea495118462c080814708b775fe5f57aac2c243c8ddfacb89f5a3584a1bc6543dcb08b315567ce1b4820fcb32d19fe6e5944adff5e31afff4f041c53c073118298348738e1590dbcc6ac7cdc9cf6669984de985a75066581957360dd583199ccda91d7b247ed4f6cd3abb663c1013c4ed3660d0990183f0ec7b3a14728fa61a72ea741a230efb339183d897259d762de543f83e233bff70b68499de863aa87575958dc728ecc4a70d13039801f3abdd21668af04715055fbffb812bc4933d650b1bc85c354aab4842fb5204bdf7a7a0de1fc39c85f08450fd77a774b8c4660203d005d119893a88ae9a8942612c9139f8399c2cf353056be38404db4282ecb34522b642cb315e47777af3726e56376b3bac74c6e9a5d415340477888c4512e5111378ad2cd446d96349107ef0949c4350fc99a05108df67353152d410a591f4696ae70b5025832372f205fedacf45886f10034bab9816a12a91e07a5de79ad50da002e657fe85e96512dfa9e45cdca4c00a9812e1998e605b16898ed5bc96eb0449a5a2c713e463f8c262832539e98b26c3b9e9740dc0a1b7a1fd1efda4ec42e53b695f9e76fc5b9d079579d70f2f365a2f5b37e1481f2dace839593a706222ed17e143f0fa359fed5cf245e1cfd2b481c0b51d444772479175b6841cc3d596451c12b9e9158460d4a70dfc92ec3dab0d7418b4c37e48de948c27709685f11acae257a5b41f8b37ecdbab9b874c57668b417b469a9811c47f4d6018f4f01c952c413b8a6e71717dbb3f8c9fd427fd273793ec5ef0dd8f7c8e6fec3f0a1940bd8081c43c3337fa2144e559c37842975c89ec5e5de888e5e2648cee49ed02b7c32c052287ad6b1998e933495679bc3f4498cfe4cac351ca0ede096b29c5aab01a70c8beae685e7b43e36be1bc5f74a37b804f289b86e212d85439889e8a5652120e6f3647fe04e88c0c7f6ec7ee630e8590cfc010b004cf15b2d3156afcf1acfce078aa7fb5b63fed68684f75694e354f584de87a4573eb221a277065d587ea459ef5dbd82c407a03ca690cdb2293f0bad93e5b36f5e9853ae56e8693363b62b2419b3b41a0882555f1982428644263128154d39ebab97e4b336e07702ec4b26382539eb09145e053bfd2521e109c91fab4f0dec17af2c26ef563b345643a2901f73c6505e82b663d1617b24e6c9c5238f61dadb79038a2dda549c19b4665f6dc7f402e2a8f46d05c5c58fe5d9f256ef370a1cc0b2c82814e9c60bbd69b8ba25058117d119f0a2a2d58ee875cbe62ed01170a690fb647c6b074363ff261f1690de6685b79c1090585cb5938626dd0dec12311bae2e015a6131decf9ccae89391b2592b5180f35ee3528927df9c7d9966c07788a8c1944169a03f1f6243200393998fef0af8e2ad6e3e57caa969ebe13110958de4fe6ece232a5c78809800ed6d6f6429ef9acf14423427ae85ea36571bce29dd21d89c0b6d23e2bf15f99c664502a6298c399f0586ca726b4e83f017833243771e3f8038c71c976576fe1e532d716c7aac7d7fe529716035f4631a1e6377510f129833009fbca3e8848d45db61d1b4ec262d61c708fb951e548e89ecc821dfa87c8c2a00b4faabd70f34ebcba9b35ac2b3a7c9dff3c8e29ff8ffd98b3d9e444706def2f86b99d442e9276ff1f6e82db469c47b1690b96cdfab735f84df3f945c64301a6eb6a11b9a2266525940bc74598684dfaad904667427289edcdd1eb0a5d7869d943cc3e94bb42a477f40735c526f3eb9587fa05e4ae5699d57bba89c1997691a0022a1c6d1a35ecf1d12180409fdd54cf79eeb1148f766c8e9366a5b7534efe7c07f7f757e5e450506252348c1d88d3c8ad1e3a8da15badce15bc9e12dddd3684127393188c89702a471729ff109d23730756dbd5517902d1a00c1671fd9fb05c3937059d969681935428d2b15191b1a986fb93ee66ec8b376f3771eeed7c1b5567a4fdc1c1140d9a014ed5bcab190ea3f4cb22fcdb818fdfb66f8b136da52d3f0cf59f416e64ca2699aa164a4a5898566d9dd04f939b2ec938168c3092d6d5ea8f0f545768401c2cd5cc33276f558ad10248c21016424cd31905ac9351c4eace484af0013dddfe2b3e26e2681cfd8394069bbbc6f079a492790b119ed5dd3bb145fb3044d6104802e26222e43a5a809725ce8354d08806cbb2f4323b2280f3fbe297daabe03dffa5aab9f95acf6283ecb12f897451acbee6bd69cabf1937ccea63b01031b1d35be708aeba8ec26b070d68f8ef3eae2a47833b506f084ff68a05a6ac1e63ded188d8a7974fb46baa91f5807cb2edfc3afbf35036c5a5cedb52687bc426854d00b3ef889a9a0ab1876c73c10fcab1a9011586cd2686469fa41c9a14bd41796bbc67c2b7cd3636db44a480d623f8ff88a006b05e0fba0773ce89a15137db599867f8e4e653654e9269f3467948603a9f51dfe9aef3c7baef32f69521ac05330364ff076e4eb1d7cdce62e90bd673f0913a76b105236b52d50b2c0a4da4e0ea586679c401fbe6583b1c8ea5bcdbc82afc0c0895f6dba7e8283c006c013787267b35ad9ad67a3acba3707aa18b28fe1d1e6a2bcd7795c357d3393cc7b8efc345b7f624b2edf22ff1b204cc53e46995be884aa8d7a1916f5405540c0a3884650a739b1b19a5bc900fe5a3c503f458c0adda4b601b3e4c4ea302692699ed78d398d24c8a5e4684c3e22ea1a40086b651c7e1fbcec9ac26ac77e7e80c7fe65527563b1a2b5d9df62596e4c31724f1ef9392f36d8d07cfcd3f33d68ba1deb7dbc18f950a345ad831c00c9924770f9de4254246239e681c584152cbadbe5bea7709224eadebe13783af73d3fdd5ea6044a9e0b49344b576fa621f7cfb0d6fdfab18e1545b61105c1b6db6ab6e6199a71ef37485862fb1db8d2b792f11061db41133316b1938de622903173eb30d03b4c3479e69c708c79f820d8b908d3fc3ec7b2a3bfa1d966af459fde05456ce426373b5b4bf5c889dbeff9004cfeeb6124f14ad6ccfd04d8b39c476aaae85eb31d8bcd936927a66ce0dd7f8b38fd99fa79bce03a1ebd9f10ad438a71d068655d7c876ed2444903348c71143dc19fb8c07b097e8039a3ce2d77766b56fe3eff67477d693d681839d67ad0dfe758c6fc9bed0105372647b46359e1e81aadd6881225a6ac9bdca91fe84919ed68ee7eb8cf3d3c36a7343f9122702b662f3da3821806ab429b3236433b907bdca4e18f098e9a8a2be149c1b55fc83ac303d63217be393d7aba1815a0cbf1f1622e0843410b2d083788bdb7e6b160440dcbee222578066154bd3824a02e6d12ae4f34934482fb0baf74a0368ce77165159db59f2774a995f6cbc7671ce9b8d60acd3eb80601ce6445e0d1b38218a99a557cc215e9372ee183faa78d8664366e1ac9ee6aff1ec6960e2546b40143d4847a39b23097b2ad099ec220b17a768a0988f7a57424d0dc68cbba41a6943213af703f6e0e64f70704656704d43148369e7bbbac3effa2ef9dde007719d9c43243e1de4185273bd1690be2dbdc4978482edc2841403016e9a2e029b0955ef4408558005308beb13a9258a4b6f11c2bf4daf2d4adce6b708d5920b64cd4fc1d1b02d54ae1130158ad93b34b1822a2324c9c3df07c9050033be546740abb5b5e5f0df23bb05fb43ad97f6c6beaf7ae7876e4693a86ca17d41f770379a806e2c3a6a809eb8f01e1fa973599aabdd471e44717870d6d6666256f6b241c017d7812bb7fa1657424c19083adab8e3944ae9fc18c41e86dd287c48842149abc4b0b6c86d6af8eb51f4b3a6b0b0fe4c1b7407b4bf56d2332963cc67a6fbd5e63fa1819bc29d78e3d12585b1817c417b01a3060220cbfbd2e597f89e851eb225409ace4e48df926940af21d2ead2137381d86ca91b1cf2acbeb8fa0e8c1931aa07afcf6cbd290bc80a69dbcae58752472c3c9db7554c319a00bc939cab9228258851e93a26021f1039d25b2fde69688ce76bb66fdfafa2e11ddaeee59a2dae982dc85fc2434a6ebd6f4b275a9d871131d2aa3a4783c76e0aa792ee1771016a09b7c2a1ea3dd03a6de08d22e7f620235afeb42733f834cfb6a98908c74b316e37c73343a1f1a2b6d4f85149f52ea154c31b2497a141d9db9a8c53ffea8cb3669362ff61ee3cf58301a835a8e25dd0f4ccf6c69787f3515d411f9a246360a7fa02b4e9eb1e0519312c26a0ad66c613b74b580d3c0ffb6e71646331416cf5df8a5cb3222e9fa778971c31780ae6b6c4c92bfda6de352ff57e7819319b8a33cd267fb49615b4f1beb716b639e3cba7783c3dc1ae176f054ca3620b5877a157a12c6db0705dd7ae584312804f2c04e3020276699dd55221e1bde3003300540dbf71da2a83aedbaefc94bb3390980476585a6b5dc44de1af05ce82c170bac2889f231a86c2ee429c04cc9e9692a6983dfc4dd91b7a81ee9a6b1b16549895f7790284f0a9bf85d8604ce3e1e6be13e20380e3f062ea570d65d1a980daf884084995e20078d10988816595e096cf0096e05271150d4986cf35d09defa326779f52946a753b22000108910a4e603f4497bcfb53d849d22e5d9776ef089288f7a41908d4cf23d938f30a12c6b3b17d3a7c46adc31ea79d1e4664c6fe7545adc08e08006f8ddcb46f4b9f28e0cf6dccd84c3a321942f3bc4ad50bc4f1e17982a08ac67d5f7bde4349d90d7e2f75879009f91d981c2e11b6727ea2aa2b29a979edb1239527431037eb1d31b44bfd922106ea272133f3b3962dc9f7a0a852732d9f241ea802611b2c300a0bbaced9ec9c3a9f4adbe750572379448fce9ecc5b2a2f512b6621d52a04b4a7f1b97b54e8b0c87461e28e6c5c602f6487022d00bbd4a4ae0fb11910b8c2ad9b58d38e19cc025322905bc6b4aab3188c4fef6f3c7285e772984a5b29d8af33c4a06f3e7e7cc50d6ec076ef68296256f935d748b3d769078fc92b331b0b8d741f004d4ae859db7d25456dcbeff3bb7b7acde5ac5206b067c62fad40251d088b5b3ce7c8a7abed901e5efdcd6554733b629dfd6a006a913039f43534ce2cdfda50ee3cf0178127e9679d7ec9b7891b52", 0x1000, 0x6367}, {&(0x7f00000000c0)="f5d05040561af63ac75ca1b35fa476ecc125e9ee6d1b12af2d642f2eab39b84ea0e789c94b1e88afb65e8c56f8469c5ae5c40f329c3556af1dda31633e9141764997c0b4fa289dd3e11f1b872f12542ddc8a720056d689ae9c7b88e805d534d2bdb9ef0a3bdd601bbe609154d81a066a1d76d406a45da127564f8986c4dbc2b3764d7699f5b5911b8e06cf181e246ee52476a3599ecd2fbb85931612bd877045679828af3bb645", 0xa7, 0x3}, {&(0x7f0000001700)="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", 0x1000, 0x800}], 0x4000, &(0x7f0000000200)={[{}, {'\'(]}\'/'}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@dont_appraise}, {@dont_appraise}, {@subj_role={'subj_role', 0x3d, ']-'}}]})
write$binfmt_elf32(r0, &(0x7f0000002700)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x5, 0x0, 0x6, 0x2, 0x1, 0x3e, 0x9, 0x38c, 0x38, 0x17e, 0x8, 0x5, 0x20, 0x1, 0x1000, 0x3f, 0x5}, [{0x70000000, 0x5, 0x3, 0x2, 0x0, 0x1fc, 0x7, 0x8}, {0x4, 0x10001, 0x1, 0xd90, 0x80000001, 0x5, 0x4abe}], "a09da1285c86e03338546109bbeb7560d2ee2150ed571edec13eb3500a3c2ac3d1e56fe0776d23bcf10bd7a7d1f7b7e69e35162735ffe81cb4837fc02ccd", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9b6)

05:11:32 executing program 6:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x3e423, 0x51)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:11:32 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000700)={0x280a1000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x11}, &(0x7f0000000100)=""/250, 0xfa, &(0x7f0000000300)=""/168, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x3, @multicast, 'team_slave_0\x00'}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000800)="ad65cf0d51c9c4bd2caedf18c93337d4c8124cdcf787677fc97cdfdce26bb76ae2a00c093c770888deb43a79bbcc23bc26954ec3356295159ea7c5c5d2c63763358822d9f74be09c95f4ffa2839da59a379f3c442680796c86d0c24c4c92157531cd43e276f8ec82a15817716e85d6157f7eab0c438b4233525b6c9fa4de0fb610e78e9706ec9aa25e895222b3a8ed0b1c6091fc3ab1fdeae0bffd35f23e9490a32764ca7cc70cfa8795a6", 0xab}, {&(0x7f00000008c0)="0a9974551284c1b5ac8de8a423756a7d00a1846b51801cd3fd71d3662c9767361783f1742fcd78221b2a192fec082310e571976a262e6ef21f46c52f694868d0e4934942e657481a8033f0bee7d7223c0ebc411f3e217b6206a6ca3c13c475b42ffc6a3eabbb64a103313c29801b5e4f520b7357c6e0c0a6688ab9922094ad8577f3ed450fde90ae716ded65b53387cf6ac205aa07954155a6615b46601c7401965d49ac9a5319c52dd46f1cb8fb8e7059af9f34aef56fe6cebc9a919ce12fab179e95", 0xc3}, {&(0x7f00000009c0)="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", 0xfb}, {&(0x7f0000000ac0)="10a67cd66598397a6d7e4de715f93ea1803d72d344b78f67940d7d34cead45a8c2d1cae109af3db4b09cdc49ba3ef9151942b1c8ed44d96f3258560d61b94ab3b9e4aac5c5d1a463f7a15dba31583c7f5a2042d74f5a162f22de4cd6b7d435a7d1bfec4096b82f0e478e117f212f16d245328b3fc26045560b93c25e699501e9851fe3e3a8f2c37efd8672454231f5d4b51f231bc6a8a37116dcc5a7804d8eebeb5cb338abd82ebe9fd75a538c3d5e2de2cb37786591dbfbd05befa0f24de25b678ee8a56375503612331c6d1505b75f626ead19943c72ec611a58a76f36c8f473bb9b0a15799e68f096d6", 0xeb}, {&(0x7f0000000bc0)="5d9c8461e6d2c5eda919b27007532617826ed41e8d210fbf83036993d081d2b77988ccd14ce5611e2a590e1a04c4db033f4e7f10ece341311c449a1cdce7f7d3574c3d0326714364f69dd1259d73a703ea93693207df9c5c61916ac1c8afbd00edf9a928ca798160624145274d7558c7ce3e7a25dd1bb27c7568e033f0d38510d3d10f1eb3fdd785a2f92459e41af0146e61382d823a2432f01910735a4509e00abe13d0782fb7499d1849a34299b57ea99f1f9fecdbd9de591338157e1a5e7c120b4deac0180d4e8018f10e427982d0eb8acc87ec3833697abb15", 0xdb}, {&(0x7f0000000cc0)="414ad5c78d4d4cf9aae33ee46ac3e4aa3b86f05aba713ace285fea52eeff0131e1489d64f2ffda8b94b1a30b4543818f66513e0c00ff55a44693269dd23cdf63c152b198345e57e94159ca920ff2373ece0aec7944c61fc229e437dce1d2f7f14ae91fb2cf09f275", 0x68}, {&(0x7f0000000d40)="91dffed5772554363dcf092249dd4952f1f1f54e49b66a1ca57f86108a391fab95129a870dd07fecfe9f26ff2f11bbdad0bf920f636f97684f7bedf921d342e30a755e67be80cab895a2d9", 0x4b}], 0x7, &(0x7f0000000e40)=[{0xb8, 0x10a, 0x80000001, "e9f56f7ffda222716681bbfe5494c4a2be953d015bad95baa75e74f2f1fe03c061763b35ef0e7bf184ec35ef9423e4cb392b57d03d5dc7a7038d63a898a230bc57c7ae9878c0864fd8a023fe42345ae67131f5eb6d623b6adc0927dc315ba579de8c0176cbd1012eb4a7817f703489c1a6378664c36f42e3a0960ecdc57e21d83777bb35228ff7f9c1ddd2b0a3ae19271c04ba5f918fdcc52b604d4485694ee8f2dfb3fe"}, {0xf0, 0x11, 0x1, "936d6b1407ef632a3c27b5714b5383f0ba9eb5dbe73687620562f849756139d8f0c30da81f4abc231529e31b59c54a08b8cfeb0c614e3b15e9eac457ea66aee5e85f68d13a53ef867e2752455f92d716f699c84a4320a4b30b79337449a2447d93baacc891cce08e0ce33a163fbcec4d3eed6d37179d649cf2bd081db73bc13079299d7d29b7ab57eeafe1587146c36632027e3702dd733681208c1e7e7717fada5d3f92ebe18892d0faa91daa040901472a5ea0e83e8986acdfad76bea685d17a4466b965e0cfde0917adcf06fe927b817381bf45d4e4dc6151251918de"}, {0x50, 0x1, 0x7f, "b22a1e1d856a3c667316ae9e9d75f9a0aad69bd334e024c023c00713e9eebe99f76b5bafc578d19247f6a9b9926f7080a945d79d918ff1b9f3"}, {0x1010, 0x111, 0x52, "0d4f1af6e978144f32076021ea63b1c34c7eeeae35458617f7bbe1b6a2d48660b5f151de95fd9f80667dfdc96bb3c814e600bb12288c7396a401c77d2ab3bfe9fd1acb3602b17775a0a76b48e7bea8eaed65ed9c48d278345c85cc6b8c4ea410ac6622bf506b9ab6cd4c169fd83cff58080c023ae51717c7cc83c32b7868a19f9ec453ae11e883ab04367c651cfe98cda405c09ca244eb1e41533d2168b0a48892dcbba1ef55ee4bd08e03e2be9b217646bb9ed9908231ac8365df89c1b181e90ca270730824e4372d7ed9d5286151e051ad9768021b00d8e0d6a9d1b2cd2fd95a024c2437d3e4ea1d734178ebcce44e3977cacd5b6c28d5521016b8139d1cb2682930ae8f440b541ef61e130cad762cf82a53d5567b08f1145e67ad6570cd00ab3e5ea2acd1151f0d303648ddb5b219ce200659cef927dba81cee481ceea482b29cdba348afef79f89d4a3dde648cafad0bc2ea81bed48c9e83c2c50d31c661bad8714eea84e8621f21dcb7d13b348c7014375c1340f219dd1f927631b053f5f1d156455b89ca234000f70ccdbce535594a8de47bf177908f3e4dbb22084cd7bb113dd73a06e0dddc4971f45d2ae01eb13059e5589badddfab1e7752881015478c4f2a0b604b9b3cd0f835d01d8ab5b464b355b5591b6b531d79c83da3162990bb04e80a78ba2adb88e4c6877379ea91ec0bcb20407b2ed02ca4247777d4766c2bb360fa23f498a2678292f97cbec675b2d99dcd34022b18dd0213d319118b2926c400173f3f10291bf3403819a50f2c0cfff66b596c0d4b9059c91f8a22d83ac1617af126069975b5261c6e5ae7e963ba6f6fd1fa5d423ba39f95505f13599ffc802ac63950d0794ffa5ad29bff413dfa986a693709bdf1e01d77f8b579cea7ec1f3cd59b2c05896dae9fe29fac539f5ade37fd2ce1f6e25087d22c08ca6e34f24818f96f3671737fb86347acaf3393ca9ae85aab23b3d63a8b4fd43013b8c85d3efa951f3517a2a1151bfb127da0a607bffd8b8cecb8536903afbc5a3774a2099fa4644d83dbbecad3cb88273ff079fcb4cf1c492aae300f5afb5181cc03185da61ac08f252827c05ad00e399f38e216194c791d4ecccef0602ebe018b4f90acba1a200b8774f2f67a6499f827269602ad5421d74ccd2d83a91e7d0b173aaf40df3363a9980de47fa7e875ddcf167fb77e4721c3b36bba8720b74630260e6bf6c5586412afaf21ad94d05027b1d2ec3529d58276b862265fbad0b1df6bfa0513e4c3378a990a9105449b4343e716a0b841bc1c7818e6974852305ecce7c77d6d1512c2fc147170b6f455c864c3c54ee120f024e6b80069bfac09465412bad12aef7980992155a5e405f8539788daba1bc3002ea430c2f9abc878370041dccdbb7c15a6182f10c862d9c08b8abd9d194ad7e7538bb68cdf939695fc0ce4aba18dca386f7a570862c72ea0de0f83a7261dfbfba47b5d04d34637ad582e5ed6c5314024acb4a87b9dc736303c48c74fb443f27f634b76da926cbea817a021c7d19afab7ccebf21846025a2091f6f5a926ab1c0f73ded8783a88942f504a542b322328786b265c65c34d1a2a2405069bc14594828c764db87c33b177e971b2eb09a0454104b196d18e299ff2fa56de87f6f50a401c9387e4aaeace6415762c11d8022332e223019eabcd64b09b36a64b81ecdcf70d204e5025104c54a4ebce53b1cf0be72985b72140641a7e9535a540b5799548b09a571335b36bfebdcd5620c6d948a8ab4aa9ca30983bbb17d353e1379bf37932881f0171403505d955f8f28f6163d1568a0d3a0c8806de329b4078764c6614d3933e2d32fe06f2e0e1b85bf46508910ad9930fa5e85232cfc5cef4ee752ecba1997d0be4a176f29a73cd695953e866bcf7172595763846cf47a09bb4966a06f0e78a3227a10dbbb25dfa1e06ccb5ec8ea906f0388558a258ef8346414b7f9185a9e31b66336bd83bbf4497487b5fb49e13fb40bef6a85b60109848edb6f47728417eb46527380d0e01918dd8d6386df9b4a16c5442c34441e48c9bc9465944f6a58ecc15cc74baf0b145124247353119bccf700dc9f0ac7c66ceaa98db949e6de1f7ed710b34cc5e013fba54aa3cccd359a4f8188a5eaf4294e3f6d908856520c431410282c89a77ffaad15e4cbec66557099fc875a60d6a9d1b37d3b05188b80e8a76f9a8815d32455621a355b5f6bdf4e8d40148e65a8a69cc6267c76537354b9c8cbb7e60893311a29cb06a8ac4e3c0aa357ece71f27d5800d6b4213b4bf27383e6c92c0c2453b3e342197edec98157fffcf94641dbbb4605102c02c85a57ebadda467032b0c0a7b6587781602c563e2580e29c63a810f30ef8db4aeac30004ee8dbd7d9ebffb81d879e3d86ec1531a69b4b6bf57c9f403aac828f4d5ac4cc22cdbf4f862239ea60fcecef1bec47b431b52193fe6a8bff75d0657d6d9c1a757754ba3cf31ea1e3f41c85ade2ca94ff4b3760710fe3f232c9936bf6efa59605b3e4fd2e6ee74256eb6bc090c4b77882252dd0e773363d12e4b2cbe2b33cbe6a3b73ea014ca5ae928f0cd06efa78b1e7f2fdaeb04271692d7961b9b38ae769105182e976d37a427d09a833bb0701081ef05cd24f729786c8702da38b3d3cd5cf2d22b85b3c44b48764a9048180291c60fad807ec00a4ecf942c598e7f93a25cbf7532eaf04922cd739209753493d333fafb43c298a2f2869faca4dda65d01b5c34a0a32598f0e2bde5c584cc3b1a7ba172a8403e5b46df7ac1d9d104def6fb8ed5c8155c46b0a27fe11b194eed1645553c265615d9acb0321ec510a3e83446e6e6e718575082257f48e9581b79b67d5929834325c1aa1fab6883f8f4f5544fabeb928ad4f1e0c30c4aa620ce7dce40e01c78292a62b2058b20a80025251322d06fe78998322241516308d73e36c4d88b613b4f8a0b146b1b7d389a89b7e056d166ca0d61fd07517c281fab5d7f571c035fd20a8f61c7a390bd7738bc115a0d4b330185fed81917807585126e77a392466829a913bb12ed863be2e40a9a0ba905076a738f02d3c9425b5cfbf446641a74593867bd15ac39c89d609d0ea6bd92ed077a6c23321e614292c5d0f687b40d26008b8c8a44c0c663cb50079880fa42b3e0df3b0101a0811eaee371bef1760b7a8da45c7a7a026503d1e3db45d493940032e08d5941e6b72c97a63e27a5ad98293ff411df92d191556fd69d07c7a9b6cc42045a1d11c1633d3306c17ee10a86f54737fd7f519120feb8cd366e29419a62addcc7b04c9b9c66870c971c116cc85386907a8802bd21b622c98544db513a50df1c7743a8adf75f3702e67c544ce0a208c63b1d44f03a1b1094159a02165dcfe85d017976a41e8efc7e07fc748add327803e8f835152cfc334167c5aa350ecdb9532bf5b86aa57c920b51de824bf39c02b51ab6016b0042a4141085dcb0746bf642af3b37582a4270d11ba50faedb834ad9c9debbb9e7d17036500e325c833a48b8e6c9cff9482b0cd0d288c19d5a3c8ce8cb3ba5ee99c4e447ca6af8174103cdbc54600da6d99e246936258307d243b56f0a18896950b1f6e480a4f8c10acdc9e21aaad0758f771af3a2d922434b29758243b663f13b2516040b9f75dc995bbe5c934430f4110119d11b23846e96d78904f1a15cfdcdbb2c97af80515852af3b9ee8ca0a283d6aa07ae4fffa59ab63d3234239eec8585fe230f7dbd1a4f7cc34939b2dfd08fc85c23062926942f679481188632b7c2f3e37fca32c10965a4c1a029c1b1b76678f040a809d8a83c06f0908dd3709248523b52d9509bfd91c59660f1717be53e829614f7290ddf8b3d43e01d21103dbe9e8b9a98d2dff1dfa0e84cfd8a1f8d3395d5682a4c7b1c4a3ec64f1cca2dcbd7f830ef1da6c936ba262a6ff77ce0e6f30f521df3c11cf138b9a3b34796a0d466e77ffc177dce215f5d9be21933d37eaace376c7da075805e70a59566d5f6b96d85bc8228c22d364f62c08b0834457e40fea0888c2fc15815627001ad70d4795f8e2e4f517f0b7186fc9b8175e3287142965616abe552de98191a44c7d7a9c9c7dad403e82aca8b125ed682e4053fa51068b66a4aed8e6579a3e033213ecbe1d06b553f89e8bd404a5a45510c2d4ffc8e3b64bce19b599d9eae0dc948b9ed93d2d89598a4f5befc4d3a08b814c85e40083bd259caae955a07b2520a12d5c07f86ef8bd77ea74a63ac89c313f7a49b5216ae666c1a601b7dc5072126dc80db724cf6d9ebe484ffdbf925c3f90e6840c813a128e5fd05db78707a418c1b578390fb1d40a316518c1447e82ddeb70b1c33889df481b66878bbe983fb387004ef61ebb1c19c7d50d64dc402fc3401f3c58b3c1e42b9aaa4dc02ea08314d4eb2932f1a9f431d2f2bb13578423e3547be5b421341c4b1b1b9af8895c2439c230e79cd8c5204ae10eb61637b74b74bef64df02c1398a0e317a4eff3db9a70abe4a34435761c90714324b480b2589b977643e1cf1f1f866f1c22fa6bdb2fa847b21ed2cd840f4efb4e6a0eec89257fc55f96c717a7cd043d8949b49a28a6c3cdba3a4e3d6066ed1d777b8d4d6cb0b8bbce2a64047e3029200954b79cb311aeb9a3a6c5e560a1e20aeeb79812286a75ae88e3841eb4d3771e5cd3d2be2f9b651dc7f0a992a5ef4023688f36d4e06db430d973cb223913247cc142117518bd84affc738cad214388d64866a485cc1d0e8b29f821307b129fbd8f87d207c8a5218fe2fbf9d837cfd506063eb8629147828ba2fa9863e6cad46ee4c2ce9ff2c0585dbf892b229833dec3f8fdb0ed631a45cd0067d248bb3ce825e966bcfd4210a2e11d61e4c888dcbb2d06eb08e61fe34af4ef3b8854207ea5526e59a50ba7b27373a5bed9d9b204159e5fd33b69359346067a3a32fb32e57a0c507c54907e2d71fc40fc3245c4e80c86ea32fbda8790d40421b58b54c8c60b9cf55ed2278b70e2cba88d486ab9d128c7acde585d410922708ea36fa99bab6ffcc0879082f305fe004d6220b1a80d5ec67a4b97a55fbb1cb1a2abf12d4fca8bea0dbe30b2fa000fe28ce16c3a1af78a0ff0677cda1249fdfef8b294f69387042ed70042f4f8df8ad699e11df09d19d0e80d8c47656408350714ef7d33eac52fa663bec5c007a9093804dc0a4a38f0fb3986a6064d22d0abc80e82c2b501e14f454a83bc492d16a2451bf6858d65d403bd324d42fc2d0550c11e7515a5acb476667bc619a96933b8361d222d31495251970e82b1292e8b07ee5859df0ef6fd1f3038575d988e6f5677ee1612f81c7cc788c367b40bdcf2eb684a302946dd65cb232bda25d674f83bb9a866ea027159384ec0aade85802707590f8a5d678a404045eaa74a338cea51d48f6070f3b9e9a6be66cf7419a772ca5e971479c87fad4be8102ee5c04b2289d7ecf1e851943de703659b0b9c63b3bcdd0df1e5eb6a43189463a80330ebc003a0a4be97f5987692f2e56f126b5e6e8e13ba1d00d1c415382cbbdf4b7600c925fcf8bd8122232be998369a93a62dbcd9e2acd0fe445d5c6cbc7c981b1f0aa680a73b9b30e3f88ab798abef0989663ca2cb3e3d27009f0592934505550ba14e9433bd174e4c7582ba7da43428aaf1ecbf5b31b68513fb1dc0365adc22a3ea87e9c778847b7842d4c0172ee945c0b2d33c56dec05fce3404a1b0ef7f65f61b7ed408ca2ef8b1229892d10f33c044babfec2bf531bb0b8116aba7a866b58638f39aac17e9630f6ca0dea01926117fc7d3f0cb0ec25ca3d834f6f73a"}, {0xc0, 0x10c, 0x5, "8c34351a0b086d502027aa8c7845b1189fd9dd6138c3970c457e656b555c9fbc930bc473bb05453a0e309143146832a00872527a76f106705d6fdc76dacfa8de23dbb2775384aa311d7bc8a8e9ead0edaf15f756664d8da73d9e66c3190a193ce86c5d23f8722e6807a5785ad092c36afdb98e98ede30268f1133bad5b2ec41a70ed9f208d6aba13d756a9223b4b3912a4281e3b6af42f54fa24c3383c00bd04f75747dc602a44749550f84a3a397d59"}, {0x30, 0xff, 0x3, "584d634ec5a338c2d4fe327c93fb6c40f27edfd4a46599ff0d"}, {0x38, 0x11, 0x2, "62045dd2aeba295990e41140e2f305f7f7590d8bd117f876be9fef1e4adfe221ba78"}, {0xd0, 0x6, 0xfe, "3b831037a27bb05f0f3fe27d658bd9cf11777ab60a50ed9a8740be43be149f8eefc8bde7dffdd9f66bbdef912f8be2bff1b407211c47c6d821ee9099783bbb06f0efa24e56290bece15d13d0cdbaf567b9903a7e0dd5b27b936103b040631bab58a904755d547ccf0527295eee6ba84a37f1c52a39fcef9efeab584271f605cd58ad2df2d9529ca87f6b036b8339d44e66a35e6e64fc3c5eb8ce1022eb2edcd19337805e1a70b3d3dff87f35eaf43d8c937a1d32071029c5fa"}], 0x1400}, 0x4040100)

05:11:32 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x840, 0x1)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc04c5349, &(0x7f00000007c0))
r5 = syz_open_dev$vcsn(&(0x7f0000000340), 0x522, 0x111200)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)={0x20200, 0xc, 0x10}, 0x18)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc04c5349, &(0x7f00000007c0))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000700)=[r4, r2, r3, r5, 0xffffffffffffffff, r6, r7, r0, r2], 0x9)
openat(r3, &(0x7f0000000300)='./file1\x00', 0x800, 0x80)
r8 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r8, 0x0)
clone3(&(0x7f0000000680)={0x100180400, &(0x7f0000000400)=<r9=>0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1f, 0x16, 0x3, 0x2d, 0x0, 0x0, 0x440, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x4, 0x8be}, 0x62008, 0xc, 0x8001, 0x3, 0x5, 0x8, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x6, r0, 0x2)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000740)={@multicast1, @multicast2}, 0xc)
sendfile(r9, r1, &(0x7f0000000040)=0x101, 0x3)

05:11:33 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:11:33 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:11:33 executing program 6:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

05:11:33 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3101.523159] loop4: detected capacity change from 0 to 40
[ 3101.570716] syz-executor.1: attempt to access beyond end of device
[ 3101.570716] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3101.570804] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3101.630066] loop7: detected capacity change from 0 to 264192
[ 3101.643402] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[ 3101.678492] syz-executor.4: attempt to access beyond end of device
[ 3101.678492] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3101.678538] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3101.710275] loop1: detected capacity change from 0 to 40
[ 3101.804870] syz-executor.1: attempt to access beyond end of device
[ 3101.804870] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3101.804898] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3101.823505] loop7: detected capacity change from 0 to 264192
[ 3101.824712] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[ 3101.869924] loop4: detected capacity change from 0 to 40
[ 3101.929131] loop1: detected capacity change from 0 to 40
[ 3101.946026] syz-executor.4: attempt to access beyond end of device
[ 3101.946026] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3101.946105] Buffer I/O error on dev loop4, logical block 10, lost async page write
05:11:33 executing program 7:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc04c5349, &(0x7f00000007c0))
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc04c5349, &(0x7f00000007c0))
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x2, 0xfffffffd, 0x217c, 0x3, 0x7})

05:11:33 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:11:33 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x1)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

[ 3102.076392] loop4: detected capacity change from 0 to 40
[ 3102.097870] syz-executor.1: attempt to access beyond end of device
[ 3102.097870] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3102.097914] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3102.133401] syz-executor.4: attempt to access beyond end of device
[ 3102.133401] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3102.133429] Buffer I/O error on dev loop4, logical block 10, lost async page write
05:11:48 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x501042, 0x4)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x191402, 0x0)
sendfile(r2, r1, &(0x7f0000000240)=0x1, 0x7)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x7, 0x8, 0x5e, 0x1, 0x0, 0x3ff, 0x40028, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x2, @perf_config_ext={0x6, 0x7}, 0x10004, 0xd, 0x2, 0x6, 0x1, 0xff, 0x8, 0x0, 0x7ff, 0x0, 0x2}, 0x0, 0x6, r0, 0x2)

05:11:48 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:11:48 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:11:48 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:11:48 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc04c5349, &(0x7f00000007c0))
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000000000003000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000079e80000000000001f0000000000000000010000000000000800000000000000000000000000000000000000000000000000000000000000090000000400000008000000000000000000000000000000400000000000000001000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b1ab7f42aa249982eb5aafbd401000000001b2f7c3a78802b00"/391])
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
signalfd4(r3, &(0x7f0000000100)={[0x2]}, 0x8, 0x80800)
ptrace$setopts(0x4206, 0x0, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, 0x0, 0xc, r1, 0x1)
r4 = getpgid(0x0)
ptrace$poke(0x4, r4, &(0x7f00000000c0), 0xfffffffffffffffd)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x8, 0x0, 0x0, 0xe0, 0x0, 0x8, 0x40080, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x4, @perf_config_ext={0x8001, 0x10000}, 0x200, 0x9, 0x1, 0x2, 0x4, 0x6, 0x2, 0x0, 0xb84, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x9)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:11:48 executing program 3:
timer_create(0x7, &(0x7f0000000140)={0x0, 0x34, 0x1, @thr={&(0x7f0000000040)="1bc6b3eaf5e5a0eba8534c495598b8ac07a0356d9f0183432db8148179d9117fb97fa61fe65f1a67cd49a48d5ade1540a53437087f3718b30560aa12ee90d7ba6ae6485135a0b0d26e6e1cf84e62a867406754cd79369d76123070d2515a6ed9", &(0x7f00000000c0)="ad938927134faf505542dfffe21c8fac4a4b9895a38bce03023bb51ed84e41f1911bcffc19301bcb373d739bd7752f85276f429b0bbb1f2bd50d9c1b1a95f4031f549ed7d5fa3423455d90e4e2f8f894f6d91c664378953115f3d2d55656b226a64c154800b6ac4032d85314"}}, &(0x7f0000000180)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {r1, r2+10000000}}, &(0x7f0000000240))
r3 = getpgrp(0x0)
timer_create(0x3, &(0x7f0000000000)={0x0, 0x19, 0x4, @tid=r3}, &(0x7f0000000040)=<r4=>0x0)
timer_delete(r4)
timer_gettime(r4, &(0x7f0000000300))
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r5, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r6 = dup(r5)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r6}}, 0x58)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400)=<r7=>0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r6}}, 0x58)
clock_gettime(0x0, &(0x7f0000000840)={<r8=>0x0, <r9=>0x0})
ppoll(&(0x7f0000000800)=[{0xffffffffffffffff, 0x4}, {}, {r7, 0x1013}, {0xffffffffffffffff, 0x182}], 0x4, &(0x7f0000000880)={r8, r9+10000000}, &(0x7f00000008c0)={[0x400]}, 0x8)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:11:48 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0xb14}}, './file1\x00'})
pwrite64(r1, &(0x7f0000000180)="289b3e386d089d6c93b9523f1b135f790d3818db55e7d6f70d1d60afe133db502725119700e8e993ce91625ee951c050cb8d697a76d284d4b3c6b7466b977c130c4252", 0x43, 0x6)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:11:48 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x8eaa}}, './file0\x00'})
ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000040)={0xd, 0x1000})

[ 3117.602099] loop7: detected capacity change from 0 to 40
[ 3117.602525] loop1: detected capacity change from 0 to 40
05:11:49 executing program 3:
timer_create(0x7, &(0x7f0000000140)={0x0, 0x34, 0x1, @thr={&(0x7f0000000040)="1bc6b3eaf5e5a0eba8534c495598b8ac07a0356d9f0183432db8148179d9117fb97fa61fe65f1a67cd49a48d5ade1540a53437087f3718b30560aa12ee90d7ba6ae6485135a0b0d26e6e1cf84e62a867406754cd79369d76123070d2515a6ed9", &(0x7f00000000c0)="ad938927134faf505542dfffe21c8fac4a4b9895a38bce03023bb51ed84e41f1911bcffc19301bcb373d739bd7752f85276f429b0bbb1f2bd50d9c1b1a95f4031f549ed7d5fa3423455d90e4e2f8f894f6d91c664378953115f3d2d55656b226a64c154800b6ac4032d85314"}}, &(0x7f0000000180)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {r1, r2+10000000}}, &(0x7f0000000240))
r3 = getpgrp(0x0)
timer_create(0x3, &(0x7f0000000000)={0x0, 0x19, 0x4, @tid=r3}, &(0x7f0000000040)=<r4=>0x0)
timer_delete(r4)
timer_gettime(r4, &(0x7f0000000300))
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r5, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r6 = dup(r5)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r6}}, 0x58)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400)=<r7=>0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r6}}, 0x58)
clock_gettime(0x0, &(0x7f0000000840)={<r8=>0x0, <r9=>0x0})
ppoll(&(0x7f0000000800)=[{0xffffffffffffffff, 0x4}, {}, {r7, 0x1013}, {0xffffffffffffffff, 0x182}], 0x4, &(0x7f0000000880)={r8, r9+10000000}, &(0x7f00000008c0)={[0x400]}, 0x8)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

[ 3117.697758] loop4: detected capacity change from 0 to 40
05:11:49 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3117.778730] syz-executor.1: attempt to access beyond end of device
[ 3117.778730] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3117.778768] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3117.809300] syz-executor.4: attempt to access beyond end of device
[ 3117.809300] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
05:11:49 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3117.809330] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3117.826956] syz-executor.7: attempt to access beyond end of device
[ 3117.826956] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3117.826986] Buffer I/O error on dev loop7, logical block 10, lost async page write
05:11:49 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3118.013737] loop1: detected capacity change from 0 to 40
05:11:49 executing program 3:
timer_create(0x7, &(0x7f0000000140)={0x0, 0x34, 0x1, @thr={&(0x7f0000000040)="1bc6b3eaf5e5a0eba8534c495598b8ac07a0356d9f0183432db8148179d9117fb97fa61fe65f1a67cd49a48d5ade1540a53437087f3718b30560aa12ee90d7ba6ae6485135a0b0d26e6e1cf84e62a867406754cd79369d76123070d2515a6ed9", &(0x7f00000000c0)="ad938927134faf505542dfffe21c8fac4a4b9895a38bce03023bb51ed84e41f1911bcffc19301bcb373d739bd7752f85276f429b0bbb1f2bd50d9c1b1a95f4031f549ed7d5fa3423455d90e4e2f8f894f6d91c664378953115f3d2d55656b226a64c154800b6ac4032d85314"}}, &(0x7f0000000180)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {r1, r2+10000000}}, &(0x7f0000000240))
r3 = getpgrp(0x0)
timer_create(0x3, &(0x7f0000000000)={0x0, 0x19, 0x4, @tid=r3}, &(0x7f0000000040)=<r4=>0x0)
timer_delete(r4)
timer_gettime(r4, &(0x7f0000000300))
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r5, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r6 = dup(r5)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r6}}, 0x58)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400)=<r7=>0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r6}}, 0x58)
clock_gettime(0x0, &(0x7f0000000840)={<r8=>0x0, <r9=>0x0})
ppoll(&(0x7f0000000800)=[{0xffffffffffffffff, 0x4}, {}, {r7, 0x1013}, {0xffffffffffffffff, 0x182}], 0x4, &(0x7f0000000880)={r8, r9+10000000}, &(0x7f00000008c0)={[0x400]}, 0x8)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:11:49 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x100)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r2 = accept(r1, &(0x7f0000001700)=@ethernet={0x0, @multicast}, &(0x7f00000003c0)=0x80)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000001780)={{0x1, 0x1, 0x18, r2}, './file1\x00'})

05:11:49 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x40010, 0x17e, &(0x7f0000002140)})

[ 3118.051476] loop4: detected capacity change from 0 to 40
[ 3118.116883] loop7: detected capacity change from 0 to 40
05:11:49 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_setup(0xb18, &(0x7f00000001c0)={0x0, 0xa71b, 0x2, 0x2, 0x3d, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000240))
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone3(&(0x7f0000000680)={0x189001400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000300)=""/228, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x4)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x103053, r2, 0x2)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r4)
mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000002, 0x10010, r3, 0x5)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

[ 3118.144916] syz-executor.1: attempt to access beyond end of device
[ 3118.144916] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3118.146399] Buffer I/O error on dev loop1, logical block 10, lost async page write
05:11:49 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:11:49 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

05:11:49 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3118.173087] syz-executor.4: attempt to access beyond end of device
[ 3118.173087] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3118.173120] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3118.282389] syz-executor.7: attempt to access beyond end of device
[ 3118.282389] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3118.282427] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 3118.322451] loop1: detected capacity change from 0 to 40
[ 3118.331931] loop4: detected capacity change from 0 to 40
[ 3118.419497] syz-executor.1: attempt to access beyond end of device
[ 3118.419497] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3118.419531] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3118.440017] syz-executor.4: attempt to access beyond end of device
[ 3118.440017] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3118.440048] Buffer I/O error on dev loop4, logical block 10, lost async page write
05:12:08 executing program 6:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x155)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400)=<r0=>0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc04c5349, &(0x7f00000007c0))
dup(r1)

05:12:08 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
write$binfmt_elf32(r0, &(0x7f0000000840)={{0x7f, 0x45, 0x4c, 0x46, 0x91, 0xff, 0x81, 0x1, 0x321, 0x2, 0x3e, 0x9, 0xee, 0x38, 0x1b, 0xffff, 0x81, 0x20, 0x2, 0x0, 0x2, 0x7}, [{0x8df3e32854e9ef41, 0x2, 0x2, 0xde4, 0x8, 0x7, 0x40, 0x4}], "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", ['\x00', '\x00', '\x00']}, 0x1358)
r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
ioctl$FITHAW(r1, 0xc0045878)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc04c5349, &(0x7f00000007c0))
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[r2]}, 0x1)
openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:12:08 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc04c5349, &(0x7f00000007c0))
syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r6=>0x0, &(0x7f0000000380)=<r7=>0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0), 0x3}, 0x0, 0x40012160}, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, <r9=>r1}, './file1\x00'})
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r7, &(0x7f0000000c80)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r9, 0x0, &(0x7f0000000c00)="da132e3a018f0302bfe3d805c270760b55d934cbc6079149b1fbfc80c1b56dd62bf6fc8619170fc630da69ec994fe5d0ec644d7b24e9a22c85a60ea9cb2bb3716ad777b661", 0x45, 0x20000000, 0x0, {0x0, r10}}, 0xc000)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x3, 0x6, 0xfad, 0xf4})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:12:08 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000))
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000040)={0x1, 0x7})

05:12:08 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:12:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:12:08 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

05:12:08 executing program 7:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

[ 3137.257894] loop4: detected capacity change from 0 to 40
[ 3137.262705] loop1: detected capacity change from 0 to 40
05:12:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:12:08 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

[ 3137.333765] syz-executor.4: attempt to access beyond end of device
[ 3137.333765] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3137.333794] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3137.413033] syz-executor.1: attempt to access beyond end of device
[ 3137.413033] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3137.413080] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3137.464640] loop4: detected capacity change from 0 to 40
[ 3137.555731] syz-executor.4: attempt to access beyond end of device
[ 3137.555731] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3137.556800] Buffer I/O error on dev loop4, logical block 10, lost async page write
05:12:24 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:12:24 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000001900))
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x4c000, 0x1, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg2\x00', <r4=>0x0})
sendmmsg$inet6(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="ce7ff0516422cb190ff2ceddcb1b752d7061dee10a6e130fa0d68933fb81d91cc0a99214a584d39fd1c52502de9825082de65f7658cbc1dd342d3a00b9dbd2430678e22f40b50055eab0a32597bc576ac83a15fa0b37e274f1cf599fcfc2ef6918fce76498ef8a7c2819c1aa981e846bd0327ccb2e0f7a8f474d1c71c6aaa907c559ad992a0cf4b92fc6ddbdedfc5dbbf8bbd3792a18ee848b9d2b01f171658ed0e073224ff8cdefb30089640db29657079af2103e3f61cabb8d0c583200a54d0ddff769f095e152a16d3e098f25677d7506dc62139ec4bf3a17f4", 0xdb}, {&(0x7f0000000700)="5857f0ad1dd9858946084c8f4444a32272c0f9b194c938e9f9481882f66b8620654b0ae33b3823b9e63815b3b8a0482a3a18155f5ce36e4eba40420a43d18625f1e82e618473111672bad5456412c33e9b970094098a8bd23b6d2201134c7671772375646e9438e10c9c965fb3ae3b84d9bb43d2b32457ce321030043ea1d29f811e85ba17693228c3b9fcb261aff553dce84fd2642111094fb284513ed7de9045d405a58398e811b5be82b0d2b5e5225a2791e9545969a24da898fe53a4ec6751c0ac912394754c21f94c978a0d8cbbdcdad8922a7d1b95d2e11ded0118670f717a2f", 0xe3}], 0x2, &(0x7f00000001c0)=[@tclass={{0x14}}, @hopopts={{0x20, 0x29, 0x36, {0x88, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000800)="4e27875518555641e761a02b47e38b280cb63cdee3cf69fe669979498cf6f41e8003f1f31ad58b89a3bff58a68577ffc2fdb75db98faab47698c09bd8630c704d2732841dc42fe7943482e2cc985ee50ebf5358429ba421d4d4be6fd258374508c86b8d0fb478d472e7912baaabd24fa226bfbbdf146d1f911fbb20638686be4fc2b9b454f615fa83a3423184722e84203fee10abc48ccf17f649b21d84538648f86e55d31ce6f9c91e2e70aa5e4a92178aa541c6f049872bb641cdb63a9efeaebbdb08b91b766619f7319950e6af737583b24eb6043d21a", 0xd8}, {&(0x7f0000000900)="2ecb57c013c9a63659cf7b25f4d6c0f6c36da511fafbde989a37ec7a42acacd88b7202dadd881cf81abe928477faf727cbb9cb80f09e2ce5745176104ffdbbdacb44366717c637b82d4f495e3adfd9bcc8415ae6a81e0a68fea5b02d922395d033cac9223a893b33a8dc3e48b92760f5fa5368826872107cb76644c0747f20ab41ca8d442867df37d8678112", 0x8c}], 0x2, &(0x7f00000009c0)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x2f, 0x4, 0x0, 0x80, 0x0, [@private2, @mcast2]}}}, @hopopts_2292={{0xb0, 0x29, 0x36, {0x1d, 0x12, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @generic={0x1, 0x7a, "74089618916602632a4c46d0682fae30fb5204d7ad384a000da9f498a99bcc6570319b6c72dce152cb228bf6ca8ee7270ed729f954bd6f46854a9f6bec106b72a93353987164417a283b97ddf68ae16258d4132cbe578f10bcc52a562cacab6475c73be107ccbd58964b39b6772b7cc07fe82f45c09d28c05c8d"}, @padn={0x1, 0x1, [0x0]}]}}}, @dstopts={{0xf0, 0x29, 0x37, {0x2f, 0x1b, '\x00', [@generic={0x81, 0xd0, "d1dba337bde0204f50176630b4af504544e92c2336cc0a57d75e143b03952022d00e172b5d9e80f8577e600422c1dd4f1d258ddf9247c80dccc01440d18ff966950dbd86a8d6204cf32556b651dfa3bd1ba7d18078cc43b5b1627b8a0cc4d1c4e5317ef6ab47ee4eaba1239f3518f3f56f7d899ffb68e609b906862373f3c0f6a8266f03bebd36c3e11654524e2081cbf92272cb7e463902fc30ac9b8c9461c493f0291394ea4355162f01db74371e48e8105fe03809893032bc285443b0e5e5bb4e6f14addd576bdf944c837d261da2"}, @pad1, @enc_lim={0x4, 0x1, 0x6}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfff}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @dstopts={{0xc8, 0x29, 0x37, {0x73, 0x16, '\x00', [@generic={0x2, 0x7b, "e4040ba8698c12ac193ee66394a27b5a887ae45ffb653ecc5413de3015aebe33806d4e1ba7d879f95be6a914c00f20faf6c2cec57c700e36e12eba5abc8959d70a770c6b59583d8d3ebaf70eb0a905d98a6f94c7974105defd756db70c1e0c8363b0eb90298d6d7c8998d10d64050b6051880cf60b4823a8162dd0"}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x40}}, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x8b}, @calipso={0x7, 0x10, {0x1, 0x2, 0xe4, 0x3, [0x3f]}}]}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x6c, 0x6, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xb0d9}, @generic={0x2}, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @empty}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, r4}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}], 0x370}}, {{&(0x7f0000000d40)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000d80)="c32022683e42015b376ae40ca2d2c7a5de58c918b0125d4b842af6cf074cafad20eb49a0758d7a63310a681177069346ac2ba5abb8953f24b11256c02484e835d8ca9a82d5065a7097a5e6d67d0941074f37a9931ab4cbe7109734286abf6629db0101ce0a5af4d1cd46495b43dceca3b30102f75a421ccccedcba39883cd76ba8606b0b474bb9c839fddf81c1bcaf9a39", 0x91}], 0x1, &(0x7f0000000e80)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x89, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x73e}}, @flowinfo={{0x14, 0x29, 0xb, 0x524}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x6, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x800}}, @flowinfo={{0x14, 0x29, 0xb, 0x15}}], 0xb8}}, {{&(0x7f0000000f40)={0xa, 0x4e22, 0x6db1, @mcast2, 0x2}, 0x1c, &(0x7f0000000fc0)=[{&(0x7f0000000f80)="eec54886a15308d7ff26354697508ff1a84412ee995ee9904f19ea9031ff596e444e67f3", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001000)="b3791fa4207b43eddbdc51d51015f16df3c242313f7866e3b52a061900809623f3b49705cb49bfe45ac3037bb12f359e58d8ebac380c73091adb967b5fb61160a547fac7", 0x44}, {&(0x7f0000001080)="c6f8ee4512f8a136a5c6cd0ace732cd6a3c547e10e3afc670dd6ae08affe5cf819765c59f1cfa8da70539d0276e39dc95a82339a396edddb1a7e2de88393b968db99c626a7a5c9f8b70724dafece196b6467e1fa2332c1e2774058f4fca212a427f5f36a8ebb852b52a136f52ff8d7070f5dfffbe796284f299bdf601e8bdb4e4612e40f1cbf4ef47a83dca2e8542ae3f3a6fa0186eb18f0650b560d264d10d6a8cb650acb96465ba3f0", 0xaa}, {&(0x7f0000001140)="c26cddeaa9d8050373f90b8765ee91bc11703cff744ba44ce09386619e4187c0cb601d7eac5f18b1c561749b5aec3e0b8785414afff920eeebe3780df2b7ab1dd812b91209405721e70034d33cedb33fd18c6c0183ac9eb79dc8f55361017e65abcac47c8e9ecc9edb10514803125234c4433422537368cd57da72f5883ae013170fd4feacbd0985977a616fb0774e15cda3c14e42b80c64d4f0b2e274eec58e696a37711da0155e5138e3", 0xab}, {&(0x7f0000001200)="347132f7842acb90bcfc2401cb3c6c11263a46fd56811498a76b90b2df6d6f6e04d1e9325f44e7c8a75b52a1709be363195dfd0d9c0af6ad1e7fbd39c9da9b899d0caab3b73a7e35652b275e794be49a4113ac688365626e9065697b6a08004e6062adc6698a5d8377220a79ecd4b9b30fd5ab4767dff76ff17d7cfdedf2b8eac404de7b40bc2151ee0f183bd7453807dc63fa4ccdc8ec5302f7ee1118bea543469dc51d25a8ac672ae77101eac5043b4722841ff4607841947808c10da9cc81a69fe0efb89f59df73dcb4cd7e440b454392ad2a26e94d598c684deefe65a91f40ac5dd7f32ec2b038bab5cc19ba48", 0xef}, {&(0x7f0000001300)="2141addc29d9336b1be55157296fb582af13312f5f63b20dff87deaa7a8dbea89e099b4972ac9ef7f98c0ea2eb75c024973e17ccdd6e8a76146b23330a71e4e76eb38de278810116382dbbeec8cce7ac1765e835d11d54c348b5f1d1ff75886c2516181e1c795897ec0ad6baa4d897e326518f7959ccfc4beb95ce0c3ef57d5939b5d6c689586a", 0x87}, {&(0x7f00000013c0)="a287b419d19bb0f98e7ac3078cb0cc717770cf5bd3192ec26ee6b722d7d92709a0e29c452d2974d0f5992df61f993d49b4083394ee0909a207ce80b26a9de17c8850b395f85892c11f69ab1d8e740c8e23abeb534271fffe6e", 0x59}, {&(0x7f0000001440)="90393e2868d8304a50ca17ee7525e36d48784cc5fbf11d553c18be17eafd6f19d220bae99f55a8fbdbf6148e423088c890d1331138b359a8d4614d7390bfce2b028e1e50d0e1bccdc282ebd22ceebdda79f6d26b8196dccc88d8336b3dc48ae6f322f176dbd4ab5986b28b3002d09b84e6", 0x71}], 0x7, &(0x7f0000001540)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1f}}, @dstopts={{0x20, 0x29, 0x37, {0x67, 0x0, '\x00', [@ra={0x5, 0x2, 0x87d2}, @padn={0x1, 0x1, [0x0]}]}}}, @dontfrag={{0x14}}], 0x50}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000015c0)="13dde17cd2a31200388dfecb023d7a43c7678b99f9bd8e31b3bcafbcf486ebcd77cea84d048527e18649e9964c13fa6c677ecce6fced1b1c4eff38a055847cdd59d992f7355707bd5c8914a851b55794f69bd0722d6452f8d57416cd514203c36ba4a0faa016d89c9b0b71fa81db95b05721ec40ba8fb5ec81a974156ea0df0cae4a17e4b66279e56537896484a13463f30235e4bf976599014321a5aea491ef1e5f1509eeba721c41989241ba0534ff47b5510512e99e4208b75c9d95dc26005f70ad11bc79484a43c6", 0xca}], 0x1}}, {{&(0x7f0000001700)={0xa, 0x4e20, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c, 0xfffffffffffffffe}}], 0x7, 0x4000000)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:12:24 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0)={0x77359400}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r2 = dup(r1)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58)
write$P9_RREADDIR(r2, &(0x7f0000000100)={0x2a, 0x29, 0x1, {0x478, [{{0x20, 0x2, 0x4}, 0x0, 0x6, 0x7, './file1'}]}}, 0x2a)

05:12:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)="9f", 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:12:24 executing program 7:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

05:12:24 executing program 6:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:12:24 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x16, 0x200018, 0x17e})

05:12:24 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000100)=0x3, 0x2)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
dup2(r2, r1)
r3 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x81, 0x9, 0x6, 0x7f, 0x0, 0x8000, 0x40800, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x5, 0x9, 0x5, 0xc78, 0x1f, 0x5, 0x0, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x6)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000840)={<r5=>0x0, 0x0, "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", "8e640559652315ed17931e585fa09e9ededbaa5899184018e4920667065ededbc0177705e982a1576f802a658cc23431698dc6332eb4bfdee44c18e1e5f572ec161ecf5f0333f3b5ae6263a4d755cdf612bd76469ae6207222d12c2f321c07a5a644a6a567b27c324d0358965e47cd8632e28ca020d60fec2e279d23072058d59769a2dd1f71599c27856132be6294bc448b7bb4e7c0f38c406f052ffbba26d6d8efcc1dc92f9646ca2b2dbc8d2e12bfe1260eecd2f0bda38b83463da0590642ad273995fb49ebfec54f01379297232b081fc5d155227aca61cc2f270567f368c544735d5cc25972796e492d336290347eb7b820c048a22f7c8599533939a41fd832023ef5977eb7f38ef6b6cb4be14b6f7f8ed7de72976c06facf298c5780ff8f677d37bdb627b3cb89e56e6e4126438ac0314286cb87a5e27ad4d81c97e477db078a5f0ea695b995d572c15ebee182ebd524c66899519f25827a488cc82adfbb5275297f3fb313a2ff0f3201b254f660ad3bd66ba4275348104b0082a7c3c37de1e417e1972a83cf724ede36e6b624c8937bfde1863c3fdef8b14beb8eb3d1be2815d439b9519ef0660a9c86b1ead4675537e64163d609b2d23a8757ff10df6a3befb0e203e830931c1d07cebd1a18b8a8053210e6a0047e14fd00929d18cb0c8fcedd334d804d6fa0872d7435a1ad2bc61f2004fcdff80f7176b6d11487ef0aa7374b7ecbeab387c743d178910517cea83a313380a19f5cdfc2f010ec4ea7e316665473eb0a1ee5ad31e12a06aa90a2a6f6353c85bc145afecd57fc06fcca48c897b81e0fb5eb26e50a89b0f09fdffc12275514464b6cd97730bbccf1fc6fe6f02f89e97e87683344dad9e92b6608ba66ab0f42bf5898a5a9671590e08d140dd7b225580dfc97d47275d8c2b7d92c50431512cba0760fd0e75433d4a9d3cc4398f37f31d43ceaa2429d88a0b985c58e346eb0bb5a2b74701d963db98d5790190efa9f98bd96240c0b6899cf258643c2f6db0f87f1ef1758314025272792b1815b8625a36983c789e047bb6227595d578744b69e27dac1bc75d083e89a0c7a9cf8e4e8509a42a9233d2e03e5e3d469151994093b3c6f7536ce04e42b7fd3b33e083e367b1f7f67ef5e165487341856c6a9e7bb76eeb56ceb14d536481d6f6fd5160452f896f83683a42c00b98c3b7b8100e85700c03e3270c03844c3550f7811fe501ded93fd3ffacf2efc06ad3d6cef75c80efc80ea8d62036d67306a2bf670389d69c5697223228a18d657b72418d53e1a39f0dfb3de11a84b926fa72fb434daa224b9615a0be442a9b2f2b52bbea2675e5b198374616d1c8a2951ca984118045eedef6f6dce737f4f98ef0d84b73d54e46644c011de34570beb4192e80325a70ebca7b174be8aa610770cdd4c5b45fc5967ace0a962c03b2c324a16f817856c5c7e6ff0c6cb28c7115635d36f74d0d4de254c27a3f57c5ec48503f6c33ea404ca760c246d029254d5d3a145978c5b443a4e1d1c23fd7cec5ea9f2a0ff24e695861b08f73b240c7242496ceacb9b35f437084fd78e08a8f95bfe15417b4622b94b6723eb74c5f9b392b1d5c86cde214c30849e8f325a1ebcc03fe85554208255c93cf9069ecf3b94e4976ddafacd9c666ddaee827ecd22efe214dc54816ce06df73948a6cad9c41c32fc820f862bc75c30b76a05cd338315fd75a4ee2412afd2f048d9a0eca7a648f67354b7d353a7c313a1ad47081277db95e0797d22918ff07a3d734157e651aa30cea21abf38463abad95d1ec145a6dedae420e0aa8ff4387c8b3be8cb4ba55dc3ccebcfdc874cf41d18d99b6436e9bf04cbe38c648882cb7476e3e24baf00e5f893aa893986357f145167fc3cc534d37afdfa34f719e8e169deb7a1e3addec3a8c1d04bfd56ab2b4b2442e3b9f79adcf52be47865689319dd87a39181b245d6fd40e1e9aa915fb6c287a39361ab93fe98bd31a97cabe65f82aba31df721b83411477301ac1bc96910402aae728ae410cb2db5dd49d0e4a0b96570e7b901724eef9ba118cf036dc8c5f8fa87d83b99fc60f5529287972a17791d4a6844c803b1110422e15b138778e0ecc8c32e4eaa14af26dd80ae438b442dd80b206b2a9d8fb1ed989d95f7d0aa296b1d2620698e9c3c9f75d2cff313e95f733bb729a5874f91cc994c9e4df65293960eb04a38682f8615978311f48babe10c874669d8b63957f3d86743a1dd6731b837f4c180070cd03a26938c5e2d433cbc03dcbbc66c444b86db468f3c16414915be6103a4e80bf6f2d8c86383c308a9bb1508afe2beac332afe53ed363c713f29ae4687fe110a5b0036a5284e952a2ccfac1095f3ff69d13902c936d7ef21ae9fc7c71b730e17de03e7732592b15085193865d37ffc265a371881787fc51ba9083dfff061fbcd4c05dd1d5ef2bcb92fe8e36e4dd2ef2bae36bebe70a8e35b9c17ac7dc26285c3f0fa5a7702dd6951b4daf3679369e38fac1d01d84e4baaf81e1b5b89ee8d197fa48e42190a7564c7e37211e800e486c098beaefbfd964f43a0c97808eaadba85c536bbbe5e4e1fe79a6d36fa57f0805ea3dbcd6bd6b8b89e4c8f548f59e1b34c1ad070fbf9d29257a5a5fa8fda122a37da7355e5ccd399e71d99dac42162a547286b6786d5837492cc85fe8aaca801acd7e2c2b44fb077e0208257793f98a1c27716b662db7001b0e8220cfaf687e3099e0689702c5eceaa7c94cce8d6cac77967cc6df9e21eb959ff6640ab74fa37b6d8ae4fe5cad1bdfd75c7fcf15d6e5cf2523eb07ee90c99a2a34c9abeb13537f80e2eee87aebea87f40d37b441ae1d087e9dfdf3a6a570866074035a39f7a97960b64fb0692cc477991de8966f1777aaebd62fa4ba932eb635e8f03148b60dc091b45a6111d773e29bfdefaea2399e1e6b6eb50369228aec961eb32bdd0ee5ecc89e71817d2e6c600d46330654902043085805b7baf61fde57757afbfbaf7716539b26e05f2c97cbcc3c2cc1af969af66d74f4524d8dfbcf85b5850046aa8b13714c1b805d3ccd60828db3548c215d887c16f65d3a9db5c59eda8c9c151f5d1f8b6507efa04b9d733692017cd7afe94b344c49a16ce5aa10a677f7088ae430e12004312fd36f860036fbec7444f5d052da9b177b3688dda67b88ad0acd31b1a8f1d50919db4267dd8cc519321bcc34093f845d417d644e8d54fece41138194aa2c0eba816115979b606cf075017ad91759af2d72198441ccd93c9435ce6ee9ed4e5d5e373ca6e4e956b9b8ff375862e290ff8630503d9316d12a34d47bc12c58f1d74a9c1de76834ae00e69f52055b24fc7e35f1af53b377bdac7cac4cf2c91b14d8659aac6595a1c01d2e19e4cd47616f47bcc797b5791602fd4aaccff7f2a4825864a43ba28225dc2d4613bb1252e766dd0801654f2b371755fd58c3943747b638eda3c8c627aa8e9413823a20541ebc9264b78cd97117dd864aff1e0a5366e2799aa66e96741bfa4424491ea548a367e68c9e880ab8b2d886d4874ed5109dc0f6c65c663e06efae90f030f4474de92a6d4b36d0db6d766fbd84c8aa9a0ccdf9a82b50075a4ef64691bd5badbff93b26e2ee58b34cbb2791c467b7c4a4e646a24e9d8a1f35641919490bba0cb43e0f0129654cc7f6410f1e1065a4129ac7e3c57fe8011c3ac5972418ee767288c99ae6ffdae1419e7dc8a8a15b20870b8ecbdb3c2e9f2e63db5c85a632ebc3b49db4f1348d102dcb2bcb8ac05e76cfe28dd925c9a8de9f1b980513e29bece66e066e13376bcdd6b69f18349f491322a10f1b75e86e752fc1bf387d4a6c51e8f3e73fafcbf0a899e8947f2009900f21a146a7b9e382c3e414a53d440a47fa95b8f0b0ebd6cbd8345a6609d17f546ae3a9c8b9ff8366d9cb557b4b408bdb60b89c6d8cb4c75400fa2bf395ba3b3d05505166d95e325ceb727e5e9418612a6c7893d5310a43498845a17af56e4daa484feea1294f5812b1c8395ce2237e38bcbd94f7c0d1c9b9c402fcdbdfa1b653c8fbce6d3fe40a43309f2fd3ddd43752717046a4077822c155655ab81a85e25a01f81732f5a9a1813c06d929de35a9266c9b6022e86b08be48236030a48929dc014abd91ec125f6bc9c702b4728543bf85cf22d51ed8bbfa091c3222793f48b707be02b708355dd379b53efb3d291b2eab188dc60b89bbea0dc8d3496cd4f9f6a944b21efc1805669d0e3f9a649c4e1374cc6912a5ff76ab1a795d3ab83a9ea717e2886d8319407b078ab680322717830f8d46813f96f784dc28f68c82a14de4aef4ffe423c5a27b2cc711c68239ddbd6735b470137bb2f9d9c4f3862c2a53603876cbfab7baa4e9a82ec9cd65498286c8ed8892090fcbf6aacc70fc2568f8057781ce32c8c7a826200219dc7a70a1f7480039b7979d2f41140bfca6338b58fffd1b7d149daf9372c8bfb440febc334e07c1f14269d8880a3488b200cb929d50eb1181b6c5270882cd7d878949ed84d3e8b578cc9305779c33c00811c292eae7c22097169a9eb0bd0633d1c946821dcf2990779dae08003f15182307a3ee843bb5a697499147b85b0871942fcf0317d5ca6de2670020a525845829fb2524eab4e3575a42486f98553a2601625e9ac68b8d75f8f670ba751e41ce19cec4c1602aa5b08c520727f56cb4add82f09dd1d9fdda2dc3f83ffb64b15156b90e69bc9dcdf187c6c29f6fe86ddfe6a30da26724df5f1778cd69e867d1e0284c39ee49dfd7a62b642819c76a5b1f047cc3cb14458ce13ff4ae7901ba9104c05bf96b5adb75799671305c9fa0ac3825a90bea4a5c56880e0be2ed0e92bc87a2ab9bf3c568b8de6631a91b1fb49c27dd5a42439db5a0e700942989ed0cc95ba49672b00414dcfb722a8a0ad48a82b6393e5e5f9f56c5818c49e8ecd50061260ebfc4f38ec2fc730c37d375f894c35fe41f13d4d04e0d725c97fb499f6007e78a238a8f8ef292077ffce895f8c7efc971cac7068d47084163c791af45991617c587a919751ce39903d012bce8dfec380b956e7dff01b43237687ebc302033587e7450403d3b6e48fb1d8478956435944afc02d34af3ea9483b225ba0a218f02b39126b68dd8a308e6efa9627098df7c482c6eab667ad7ab0f3e5e9892142ceb88cca6d7a95f34dbdf813008a0b4860220287e9646314ed0c098a9ec8b3c3dfb71886bb0204ee3c348ba868c3ca914a82378ff341c32f6906787c2a6da89606436a0b1d2c4f52ebcca2d21a30b500deaf96c3d7cd07895e097eba45cfee6cb42809d7614ee9e277c52d624e124028b5c6b1eab88276e3e1b8832d55cf59cdc4f80f0d93da9dfff268dc9ea6bd2cb37e05f1ec262dccd7ee993482d3f0fbc03f04b8df4f6b50a6a11b2cc707cba16fd543359"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001840)={r5, 0x0, "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", "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"})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc04c5349, &(0x7f00000007c0))
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000140)=0x10)

[ 3152.798417] loop1: detected capacity change from 0 to 40
[ 3152.840124] loop4: detected capacity change from 0 to 40
05:12:24 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_WAITACTIVE(r0, 0x5607)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})

[ 3152.857758] syz-executor.1: attempt to access beyond end of device
[ 3152.857758] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3152.858843] Buffer I/O error on dev loop1, logical block 10, lost async page write
05:12:24 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:12:24 executing program 7:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

05:12:24 executing program 6:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

[ 3153.009612] loop1: detected capacity change from 0 to 40
[ 3153.036082] syz-executor.4: attempt to access beyond end of device
[ 3153.036082] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3153.036128] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3153.084324] syz-executor.1: attempt to access beyond end of device
[ 3153.084324] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3153.084354] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3169.323469] loop3: detected capacity change from 0 to 40
05:12:40 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:12:40 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440)=<r0=>0x0, &(0x7f0000000480)=<r1=>0x0, {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=<r2=>0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=<r3=>0x0)
r4 = getpid()
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x111180, 0x0)
clone3(&(0x7f0000000300)={0x100104000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3a}, &(0x7f0000000700)=""/4096, 0x1000, &(0x7f0000000100)=""/13, &(0x7f00000001c0)=[r2, r3, r0, r0, r4, r1], 0x6, {r5}}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:12:40 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc04c5349, &(0x7f00000007c0))
writev(r1, &(0x7f0000001080)=[{&(0x7f0000000000)="dba4e38c0be5a6843283bddfa5ad02d9d7d2a3c407ca7538627490fb27e9fb8f7cd49885775c3e16309ddc7a6afe64bc1cf12a2a24e38e85a078d347c945ef7b5fbfe567e51e49e5a3a83526a9f5524b8bdc671a880fadb51b870c1dabf30cb6a80d4fd2197f46673481a16c4f4b4288f2b0dc3d6f9870519d72a74302fa", 0x7e}, {&(0x7f0000000080)="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", 0x1000}], 0x2)

05:12:40 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)="9f", 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:12:40 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)="9f", 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:12:40 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:12:40 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000300)=""/12, 0xc}], 0x3, &(0x7f0000000380)}, 0x10000)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000700))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:12:40 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3169.335327] loop7: detected capacity change from 0 to 40
05:12:40 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)="9f", 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:12:40 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:12:40 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)="9f", 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3169.380353] loop4: detected capacity change from 0 to 40
[ 3169.385294] loop1: detected capacity change from 0 to 40
[ 3169.412112] syz-executor.7: attempt to access beyond end of device
[ 3169.412112] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
05:12:41 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3169.412135] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 3169.452518] syz-executor.1: attempt to access beyond end of device
[ 3169.452518] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3169.452556] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3169.471597] syz-executor.3: attempt to access beyond end of device
[ 3169.471597] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3169.471645] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 3169.487893] syz-executor.4: attempt to access beyond end of device
[ 3169.487893] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3169.487916] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3169.575802] loop7: detected capacity change from 0 to 40
[ 3169.596457] loop1: detected capacity change from 0 to 40
[ 3169.627462] loop4: detected capacity change from 0 to 40
05:12:41 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)="9f", 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:12:41 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)="9f", 0x1}, {0x0}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:12:41 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfffffff, 0x4, @perf_config_ext={0x8c, 0xa54}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400)=<r2=>0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=<r3=>0x0, {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
perf_event_open(&(0x7f00000008c0)={0x0, 0x80, 0x80, 0x7, 0x1f, 0x8, 0x0, 0x8, 0xa040, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000740), 0x4}, 0x84c0, 0xb10, 0x6, 0x4, 0xc1, 0xffff, 0x4, 0x0, 0x8, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc04c5349, &(0x7f00000007c0))
ioctl(r4, 0x2, &(0x7f0000000040)="8bf048bd69f54af433a04caf335dffd1cf9cfacd2aa8a6325c8ae1a1cdc3cdcb3a24e413")
clone3(&(0x7f0000000840)={0x10020a200, &(0x7f00000000c0), &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000140), {0x17}, &(0x7f0000000180)=""/204, 0xcc, &(0x7f0000000300)=""/229, &(0x7f0000000700)=[r1], 0x1}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c80)=0x14)
sendfile(r6, r2, &(0x7f0000000cc0)=0x2, 0xa48a)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0x10000000})
r7 = gettid()
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000d40)=<r8=>0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000b40)=<r9=>0x0)
r10 = getpid()
clone3(&(0x7f0000000bc0)={0xa000000, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0), {0x11}, &(0x7f0000000a00)=""/99, 0x63, &(0x7f0000000a80)=""/118, &(0x7f0000000b80)=[r7, r8, r9, r10, r3, r5], 0x6}, 0x58)
ptrace$setopts(0x4206, 0x0, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, 0x0, 0xc, 0xffffffffffffffff, 0x1)
prlimit64(0x0, 0xe, 0x0, &(0x7f0000000d00))

[ 3169.703622] syz-executor.7: attempt to access beyond end of device
[ 3169.703622] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3169.703648] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 3169.721494] syz-executor.4: attempt to access beyond end of device
[ 3169.721494] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3169.721515] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3169.729767] loop3: detected capacity change from 0 to 40
[ 3169.826010] loop7: detected capacity change from 0 to 40
[ 3169.841463] loop4: detected capacity change from 0 to 40
[ 3169.847879] syz-executor.1: attempt to access beyond end of device
[ 3169.847879] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3169.849015] Buffer I/O error on dev loop1, logical block 10, lost async page write
05:12:41 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000000))
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})

[ 3169.919036] syz-executor.7: attempt to access beyond end of device
[ 3169.919036] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3169.920342] Buffer I/O error on dev loop7, logical block 10, lost async page write
05:12:41 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000040)={0x7})
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:12:41 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0xcc)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)=<r1=>0x0)
clone3(&(0x7f0000000300)={0x4400, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180), {0x22}, &(0x7f00000001c0)=""/3, 0x3, &(0x7f0000000700)=""/4096, &(0x7f0000000240)=[r1, 0x0], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:12:41 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3169.942551] syz-executor.3: attempt to access beyond end of device
[ 3169.942551] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3169.944636] Buffer I/O error on dev loop3, logical block 10, lost async page write
05:12:41 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:12:41 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x0, 0x100, 0x0, 0x8004, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=<r1=>r0, @ANYBLOB="00009ba6befa3bf48fd6692edf4e35bc880000000000002e2f66696c65300073089aeccd86e46ece741022047068f82a99509a95fdf0fc30cfb1a2131dab98e185"])
ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f00000000c0))
r2 = syz_io_uring_complete(0x0)
sendmmsg$inet6(r2, &(0x7f0000000080), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x34}, @dev={0xac, 0x14, 0x14, 0x31}}, 0xc)

[ 3169.999646] loop1: detected capacity change from 0 to 40
[ 3170.030798] syz-executor.4: attempt to access beyond end of device
[ 3170.030798] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3170.030846] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3170.079058] loop7: detected capacity change from 0 to 40
05:12:55 executing program 3:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x0, 0x100, 0x0, 0x8004, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=<r1=>r0, @ANYBLOB="00009ba6befa3bf48fd6692edf4e35bc880000000000002e2f66696c65300073089aeccd86e46ece741022047068f82a99509a95fdf0fc30cfb1a2131dab98e185"])
ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f00000000c0))
r2 = syz_io_uring_complete(0x0)
sendmmsg$inet6(r2, &(0x7f0000000080), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x34}, @dev={0xac, 0x14, 0x14, 0x31}}, 0xc)

05:12:55 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r1 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x800)
ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f00000000c0))
open(&(0x7f0000000140)='./file1\x00', 0x680000, 0x1a4)
waitid$P_PIDFD(0x3, r0, 0x0, 0x2, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x1e, 0x10, 0x200181, &(0x7f0000002140)})

05:12:55 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x40)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:12:55 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)="9f", 0x1}, {0x0}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:12:55 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:12:55 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)="9f", 0x1}, {0x0}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:12:55 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440)=<r0=>0x0, &(0x7f0000000480)=<r1=>0x0, {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = fork()
ptrace$setopts(0x4206, r3, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r3, 0xc, r2, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={<r4=>0x0}, &(0x7f0000000200)=0xc)
clone3(&(0x7f0000000700)={0x201000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0xa}, &(0x7f0000000100)=""/154, 0x9a, &(0x7f0000000300)=""/255, &(0x7f0000000240)=[r0, r3, r1, r4], 0x4}, 0x58)

05:12:55 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x40)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = fork()
ptrace$setopts(0x4206, r3, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r3, 0xc, r2, 0x1)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1, 0x3, 0x7, 0x3, 0x0, 0x6, 0x200, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000001c0), 0x9}, 0x800, 0x3, 0x7fff, 0x4, 0x5, 0xff, 0x90, 0x0, 0x1, 0x0, 0x5}, r3, 0x9, r0, 0x8)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:12:55 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
syz_open_dev$vcsu(&(0x7f00000000c0), 0xd790, 0x800)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc04c5349, &(0x7f00000007c0))
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)

05:12:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)="9f", 0x1}, {0x0}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:12:56 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3184.178294] loop4: detected capacity change from 0 to 40
05:12:56 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000200)={0xa0100800, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180), {0x7}, &(0x7f0000000300)=""/201, 0xc9, &(0x7f0000000700)=""/200, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0xa, {r0}}, 0x58)
r1 = gettid()
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440)=<r2=>0x0, &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000800)=""/219, &(0x7f0000000640)=[r1, 0xffffffffffffffff], 0x2}, 0x58)
rt_sigqueueinfo(r2, 0x2e, &(0x7f0000000540)={0x17, 0x8, 0x4})
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

[ 3184.180233] loop7: detected capacity change from 0 to 40
[ 3184.181341] loop1: detected capacity change from 0 to 40
[ 3184.411566] bio_check_eod: 2 callbacks suppressed
[ 3184.411589] syz-executor.4: attempt to access beyond end of device
[ 3184.411589] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
05:12:56 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3184.411624] buffer_io_error: 2 callbacks suppressed
[ 3184.411634] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3184.441977] syz-executor.7: attempt to access beyond end of device
[ 3184.441977] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3184.442015] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 3184.674787] syz-executor.1: attempt to access beyond end of device
[ 3184.674787] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3184.674832] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3184.687748] loop4: detected capacity change from 0 to 40
[ 3184.729961] loop7: detected capacity change from 0 to 40
[ 3184.878962] syz-executor.4: attempt to access beyond end of device
[ 3184.878962] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3184.879008] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3184.909796] loop1: detected capacity change from 0 to 40
[ 3184.947554] syz-executor.7: attempt to access beyond end of device
[ 3184.947554] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3184.947595] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 3185.024871] syz-executor.1: attempt to access beyond end of device
[ 3185.024871] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3185.024987] Buffer I/O error on dev loop1, logical block 10, lost async page write
05:13:21 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700)={0x0, <r1=>0x0})
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)=<r2=>0x0)
clone3(&(0x7f0000000800)={0x45000600, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x2b}, &(0x7f00000001c0)=""/131, 0x83, &(0x7f0000000300)=""/217, &(0x7f00000007c0)=[r1, 0xffffffffffffffff, r2], 0x3}, 0x58)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x80, 0x1f, 0x7, 0x0, 0x0, 0x6, 0x480, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x4808, 0x80000001, 0xfffffffb, 0xd014b6b652d41295, 0x7, 0x1, 0x69, 0x0, 0x2, 0x0, 0x1ff}, r0, 0x10, 0xffffffffffffffff, 0xb)

05:13:21 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:13:21 executing program 7:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x3, 0x7d6, 0x3, 0x3, 0x7})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)

05:13:21 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x48}}, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x4f}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x72}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9, 0xc5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/LNXSYSTM:00', 0x12002, 0x0)
sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)={0x44, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xffff}, @NL80211_ATTR_PMKID={0x14, 0x55, "e4d47fc131c1153f7a9e37540ed14d7e"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x44}, 0x1, 0x0, 0x0, 0x44041}, 0x4800)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:13:21 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x110)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:13:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:13:21 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:13:21 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x18, 0x6, 0xc6, &(0x7f0000000000)="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"})
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})

[ 3209.910781] loop3: detected capacity change from 0 to 40
[ 3209.912900] loop1: detected capacity change from 0 to 40
05:13:21 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:13:21 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:13:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3209.978328] loop4: detected capacity change from 0 to 40
[ 3210.072620] syz-executor.1: attempt to access beyond end of device
[ 3210.072620] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3210.072668] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3210.128763] syz-executor.3: attempt to access beyond end of device
[ 3210.128763] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3210.128812] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 3210.169969] syz-executor.4: attempt to access beyond end of device
[ 3210.169969] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3210.170014] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3210.356428] loop1: detected capacity change from 0 to 40
05:13:21 executing program 7:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0xff3f0000, 0x0)

05:13:21 executing program 6:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc04c5349, &(0x7f00000007c0))
fremovexattr(r0, &(0x7f00000001c0)=@known='system.sockprotoname\x00')
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x400000000003, 0xa6}, 0x18930, 0x0, 0x2, 0x5, 0x0, 0x0, 0x8001, 0x0, 0x10000000}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000480), {0x3}, &(0x7f00000000c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x220e01, 0x0)

05:13:21 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = fork()
ptrace$setopts(0x4206, r1, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r1, 0xc, r0, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x40007, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x8001}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:13:21 executing program 5:
ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000700))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x4001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x4, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x100, 0x4, 0x8, 0x6, 0x100000000, 0x9, 0x5}, 0xffffffffffffffff, 0x9, r2, 0xb)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x8, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x8001, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone3(&(0x7f0000000680)={0x102400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x80000035}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r4 = eventfd2(0x7ff, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r5, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r6 = dup(r5)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r6}}, 0x58)
openat(r6, &(0x7f00000002c0)='./file1\x00', 0x80000, 0x0)

05:13:22 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:13:22 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x48}}, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x4f}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x72}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9, 0xc5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/LNXSYSTM:00', 0x12002, 0x0)
sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)={0x44, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xffff}, @NL80211_ATTR_PMKID={0x14, 0x55, "e4d47fc131c1153f7a9e37540ed14d7e"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x44}, 0x1, 0x0, 0x0, 0x44041}, 0x4800)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

[ 3210.446050] loop3: detected capacity change from 0 to 40
[ 3210.452731] loop4: detected capacity change from 0 to 40
[ 3210.465690] syz-executor.1: attempt to access beyond end of device
[ 3210.465690] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
05:13:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3210.465752] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3210.649093] syz-executor.4: attempt to access beyond end of device
[ 3210.649093] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3210.649139] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3210.666527] syz-executor.3: attempt to access beyond end of device
[ 3210.666527] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3210.666570] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 3210.879506] loop4: detected capacity change from 0 to 40
[ 3210.974862] syz-executor.4: attempt to access beyond end of device
[ 3210.974862] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3210.976952] Buffer I/O error on dev loop4, logical block 10, lost async page write
05:13:41 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:13:41 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r5 = dup(0xffffffffffffffff)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58)
r6 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r6, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r6, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r7 = dup(r6)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r7}}, 0x58)
io_submit(0x0, 0x7, &(0x7f0000003900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)="cb637a6d1ef848f3d031f69a7ce0c8ef0b9d60a159e42b397d06f647f7d4143fff48da5158bfd53a640d04667232e5d0cfe607d5433d75689f1a9b543d01ed82ab3056754e79d74616c5554a6cdcbf744aafb23130430c67cdc64bf1c60b1582a8bc46fad12be2bbb8c6ea0c39", 0x6d, 0x1, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xf7, 0xffffffffffffffff, &(0x7f0000000700)="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", 0x1000, 0x0, 0x0, 0x3, r1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000001700)="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", 0x1000, 0x5, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000340)="1c072786a625a7281ba0416632912b9776668afda47c504903b68aaf81ba33b658319ef3545e989091c0212593052e0cb515846800645112bce8bb44afeb0e8dd3add4e1", 0x44, 0x8001, 0x0, 0x1, r1}, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000002700)="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", 0x1000, 0x7, 0x0, 0x1, r5}, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x8, 0xc45c, r2, &(0x7f0000003740)="9b076b4cf63a63ba6857a30b87fd4b1468", 0x11, 0xffff, 0x0, 0x2, r1}, &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000037c0)="05481f915f93594b2408f772d9e458a3659979221165af5673f14ced2f29098d60ba645a47f14ac5dc25690cf9d27e2d05adbe9730b80f65826ce7a0490e2e849f36f66ddbf31ffd34886774dd9710e129131de4fba3ff23b907db92d97279b4a96ae5849541d7f8d07b08375596fb7bcdadcd5516312eee17ea67b4088119dc640467db5e1d290e59936e977ad7f05df946cc09014fc5bf3c92353a341a1ae02a62a86452599c9eb39f004dade7d091ac69b65f84c3730e06a6d502ec88a706e855f1e549e0c14e247cd409db946101e69f9999113de1af18d28f0a38b91d", 0xdf, 0xf48b, 0x0, 0x0, r7}])
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:13:41 executing program 3:
ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000700))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x4001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x4, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x100, 0x4, 0x8, 0x6, 0x100000000, 0x9, 0x5}, 0xffffffffffffffff, 0x9, r2, 0xb)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x8, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x8001, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone3(&(0x7f0000000680)={0x102400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x80000035}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r4 = eventfd2(0x7ff, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r5, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r6 = dup(r5)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r6}}, 0x58)
openat(r6, &(0x7f00000002c0)='./file1\x00', 0x80000, 0x0)

05:13:41 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x48}}, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x4f}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x72}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9, 0xc5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
[ 3229.813543] loop1: detected capacity change from 0 to 40
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/LNXSYSTM:00', 0x12002, 0x0)
sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)={0x44, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xffff}, @NL80211_ATTR_PMKID={0x14, 0x55, "e4d47fc131c1153f7a9e37540ed14d7e"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x44}, 0x1, 0x0, 0x0, 0x44041}, 0x4800)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:13:41 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r2 = dup(r1)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58)
ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0xe61, 0x4})
r3 = dup3(r0, 0xffffffffffffffff, 0x80000)
ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000000)={0x6})
ioctl$VT_WAITACTIVE(r0, 0x5607)

05:13:41 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f00000002c0)='^', 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:13:41 executing program 7:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x1e, 0x1e, 0x8e})
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})

05:13:41 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=<r1=>0x0)
clone3(&(0x7f0000000700)={0x10000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x34}, &(0x7f0000000100)=""/195, 0xc3, &(0x7f0000000300)=""/205, &(0x7f0000000240)=[r0, r1, r0], 0x3}, 0x58)

[ 3229.847780] loop4: detected capacity change from 0 to 40
[ 3229.967604] syz-executor.1: attempt to access beyond end of device
[ 3229.967604] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3229.967655] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3230.020703] syz-executor.4: attempt to access beyond end of device
[ 3230.020703] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3230.020752] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3245.511193] loop1: detected capacity change from 0 to 40
[ 3245.511777] loop7: detected capacity change from 0 to 40
05:13:56 executing program 6:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x1e, 0x0, 0x0)
shutdown(r0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume_offset', 0x2, 0x0)
write(r1, &(0x7f0000000140)="c2", 0x1)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000000c0)={0x6, 'tunl0\x00', {0x3}, 0x8001})

05:13:56 executing program 2:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = fork()
ptrace$setopts(0x4206, r1, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r1, 0xc, r0, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x26, 0xfb, 0x3, 0x0, 0xfffffffffffffff8, 0x20000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x10000, 0x0, 0xb3, 0x8, 0x80000000, 0x6, 0x4, 0x0, 0x3f, 0x0, 0x2}, r1, 0x9, 0xffffffffffffffff, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f00000001c0)=""/155, 0x9b, 0x2000, &(0x7f0000000300)=@ethernet={0x306, @multicast}, 0x80)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:13:56 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:13:56 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x8, 0x3, &(0x7f0000000800)=[{&(0x7f0000000300)="62b6103ff363d4c44b180066cd357724c1f434a9dd8ee80a3ed2c98d06e37ea06aff4b6ce8453f4cbfba028a22689a6b6758b76fa3f839f953bd203fc6e534c14331a5d9535de674d3448a559cc04483f3d69b5c60bba949fbd66cc7e741c33027976e7712183d14be8a67dcae64644dc924de2072916f5c63ba0921248b6a9abdbcb9781faf7e28b04f64f16acdadcb7504bfe47fe13db53c40d9d029a085dfa7031ab687", 0xa5, 0x523d}, {&(0x7f0000000700)="64144ed572a34933084d95a48a35c11b8fe092b7e6158ae4d756a550ff4e031c67da8a28a97efdb464c74d99f4fe48ef94119ac65a2c7ce909f5d3bef6f7eb449f632cf813ba3b4d229f10", 0x4b, 0x7}, {&(0x7f0000000780)="d4183721988f21fc5ed8c1ca6b53476c9f527c4e10cf19af25189b60b3d1e65ae2326f9c6164d04175ee7e1de8084d9868dc84a3a4767ef6a323e84e7a9879668420063a3d051cd3fe329e43", 0x4c, 0x895}], 0x6008802, &(0x7f0000000880)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c696f636861727365743d6d61637475726b6973682c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c757466383d302c64656275672c6e6f6e756d7461696c3d302c756e695f786c6174653d312c73686f72746e616d653d77066e6e742c646566636f6e746578743d757365725f752c6f626a5f726f6c653d2c61756469742c6673757569643d61313336653261342d383164622d623561312d323339002d62333665373835872c613fc169742c646f6e745f61707072616973652c66736e616d653d2f5c252f2c636f6e746578743d73797361646d5f752c00"])
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10)
openat(r1, &(0x7f0000000040)='./file1\x00', 0x40, 0xd4)

05:13:56 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:13:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f00000002c0)='^', 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:13:56 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r2 = dup(r1)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58)
ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000000)={0xd, 0x4})
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})

05:13:56 executing program 3:
ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000700))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x4001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x4, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x100, 0x4, 0x8, 0x6, 0x100000000, 0x9, 0x5}, 0xffffffffffffffff, 0x9, r2, 0xb)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x8, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x8001, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone3(&(0x7f0000000680)={0x102400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x80000035}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r4 = eventfd2(0x7ff, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r5, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r6 = dup(r5)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r6}}, 0x58)
openat(r6, &(0x7f00000002c0)='./file1\x00', 0x80000, 0x0)

[ 3245.522589] loop4: detected capacity change from 0 to 40
[ 3245.540556] loop5: detected capacity change from 0 to 82
[ 3245.544727] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
05:13:57 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x61, &(0x7f0000002140)})

[ 3245.632694] syz-executor.7: attempt to access beyond end of device
[ 3245.632694] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3245.633798] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 3245.645346] syz-executor.4: attempt to access beyond end of device
[ 3245.645346] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3245.646423] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3245.700871] syz-executor.1: attempt to access beyond end of device
[ 3245.700871] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3245.703634] Buffer I/O error on dev loop1, logical block 10, lost async page write
05:13:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f00000002c0)='^', 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:13:57 executing program 7:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x80, 0x0, 0x0, 0x1, 0x14000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x20000000000}, 0x8800, 0x1, 0x7, 0x8, 0x5, 0x9, 0x7, 0x0, 0xffffffff, 0x0, 0x3}, 0x0, 0x7, r1, 0x1)

05:13:57 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x5, 0x66cc, 0x7fdf, 0x40, 0x2a1d, 0x9})
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

05:13:57 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:13:57 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:13:57 executing program 7:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x80, 0x0, 0x0, 0x1, 0x14000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x20000000000}, 0x8800, 0x1, 0x7, 0x8, 0x5, 0x9, 0x7, 0x0, 0xffffffff, 0x0, 0x3}, 0x0, 0x7, r1, 0x1)

05:13:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {0x0}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:13:57 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
r3 = accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f00000001c0)=0x10, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0xfffffffffffffcfe)

[ 3245.812680] loop4: detected capacity change from 0 to 40
[ 3245.861747] loop5: detected capacity change from 0 to 82
05:13:57 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r3, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x880)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010000faffffffffffff2c000000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x8044)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan0\x00'})
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0xff3f0000, 0x0)

[ 3245.862022] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[ 3245.894789] syz-executor.4: attempt to access beyond end of device
[ 3245.894789] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3245.894812] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3245.940814] loop1: detected capacity change from 0 to 40
[ 3246.018780] loop6: detected capacity change from 0 to 40
[ 3246.088759] loop4: detected capacity change from 0 to 40
05:13:57 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:13:57 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc04c5349, &(0x7f00000007c0))
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000))

[ 3246.130981] syz-executor.1: attempt to access beyond end of device
[ 3246.130981] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3246.132751] Buffer I/O error on dev loop1, logical block 10, lost async page write
05:13:57 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:13:57 executing program 7:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x80, 0x0, 0x0, 0x1, 0x14000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x20000000000}, 0x8800, 0x1, 0x7, 0x8, 0x5, 0x9, 0x7, 0x0, 0xffffffff, 0x0, 0x3}, 0x0, 0x7, r1, 0x1)

05:13:57 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
memfd_secret(0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x18)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
write(r2, &(0x7f0000000300)="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", 0xfc)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

[ 3246.216826] loop6: detected capacity change from 0 to 40
[ 3246.267000] syz-executor.4: attempt to access beyond end of device
[ 3246.267000] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3246.267043] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3246.307094] syz-executor.6: attempt to access beyond end of device
[ 3246.307094] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3246.307121] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3246.374037] loop1: detected capacity change from 0 to 40
[ 3246.458744] syz-executor.1: attempt to access beyond end of device
[ 3246.458744] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3246.458783] Buffer I/O error on dev loop1, logical block 10, lost async page write
05:14:13 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000700)="5d4ec677157653bf3329be00eb3be7ea8ca60b91e94bdefdfb4c8725cb102ec74a7916698b9ec77d76d75de9d6cbcaebf2012d69272f293f2a980cea20ec38d076b7b941b8ce9a6ec5551884c0a1a75660ec68ef8c619123d1eabfe3ffa4ba7090503109979efb5c8377c712501609e2b73c27bfcc", 0x75)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r3 = fcntl$dupfd(r0, 0x0, r1)
openat(r3, &(0x7f0000000300)='./file1\x00', 0x1f1315ad9a13ff57, 0x8)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
r6 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)
sendmmsg(r2, &(0x7f0000004240), 0x0, 0x20000001)
recvfrom(r6, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r7 = dup(r6)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r7}}, 0x58)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'netpci0\x00'})
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:14:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {0x0}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:14:13 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0xa, 0xc, 0x17f, &(0x7f0000002140)})

05:14:13 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r3, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x880)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010000faffffffffffff2c000000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x8044)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan0\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan3\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r5, 0x700, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xf5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xc6}]}, 0x58}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r8, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0xff3f0000, 0x0)

05:14:13 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:14:13 executing program 3:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x20, 0x6, 0x2, 0x1f, 0x0, 0x10000, 0x80042, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffff7, 0x2, @perf_config_ext={0x8000}, 0x21, 0x5, 0x3, 0x1, 0x6, 0x6, 0x9, 0x0, 0x3, 0x0, 0x5d84}, 0x0, 0x3, r0, 0x1)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = fork()
ptrace$setopts(0x4206, r2, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r2, 0xc, r1, 0x1)
r3 = clone3(&(0x7f0000000300)={0x20000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {}, &(0x7f0000000140)=""/1, 0x1, &(0x7f0000000180)=""/138, &(0x7f0000000240)=[r2], 0x1}, 0x58)
r4 = perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x5, 0x6, 0x5, 0x81, 0x0, 0x8, 0x2020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x7, 0x10}, 0x1, 0xd77, 0x1, 0x5, 0x4, 0x9b, 0x8, 0x0, 0xbfaf, 0x0, 0x9}, r3, 0x3, r0, 0x1)
perf_event_open(&(0x7f0000000380)={0x8b3fdb73e3ce5b46, 0x80, 0x9, 0x9b, 0x9, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fff, 0x1, @perf_config_ext={0x2, 0x8}, 0x10200, 0x4, 0x0, 0x3, 0xfffffffffffffffa, 0x20, 0x4, 0x0, 0x6, 0x0, 0x400}, 0xffffffffffffffff, 0x10, r4, 0x1)

05:14:13 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3262.128975] loop6: detected capacity change from 0 to 40
[ 3262.137753] loop4: detected capacity change from 0 to 40
05:14:13 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3262.187929] loop1: detected capacity change from 0 to 40
05:14:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {0x0}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:14:13 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r3, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r4 = dup(r3)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58)
openat(r4, &(0x7f0000000240)='./file1\x00', 0x101000, 0x24)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r5, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff}, './file1\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x90000, 0x104)
inotify_add_watch(r6, &(0x7f00000001c0)='./file1\x00', 0x400)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:14:13 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3262.197648] syz-executor.4: attempt to access beyond end of device
[ 3262.197648] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3262.197672] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3262.214151] loop2: detected capacity change from 0 to 40
[ 3262.223821] syz-executor.6: attempt to access beyond end of device
[ 3262.223821] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3262.223843] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3262.340752] syz-executor.1: attempt to access beyond end of device
[ 3262.340752] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3262.340808] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3262.343759] loop4: detected capacity change from 0 to 40
[ 3262.410667] syz-executor.4: attempt to access beyond end of device
[ 3262.410667] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3262.410695] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3262.412543] syz-executor.2: attempt to access beyond end of device
[ 3262.412543] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3262.412584] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3262.584072] loop1: detected capacity change from 0 to 40
[ 3262.654594] syz-executor.1: attempt to access beyond end of device
[ 3262.654594] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3262.656767] Buffer I/O error on dev loop1, logical block 10, lost async page write
05:14:29 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:14:29 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r3, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r4 = dup(r3)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58)
openat(r4, &(0x7f0000000240)='./file1\x00', 0x101000, 0x24)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r5, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff}, './file1\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x90000, 0x104)
inotify_add_watch(r6, &(0x7f00000001c0)='./file1\x00', 0x400)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:14:29 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:14:29 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x26, 0x18, 0x13, &(0x7f0000002140)})

05:14:29 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x18a)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r5 = dup(r4)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1)
recvfrom(0xffffffffffffffff, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r7 = dup(0xffffffffffffffff)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180), {0x8035}, &(0x7f00000001c0)=""/173, 0xad, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[r6, 0x0], 0x2, {r7}}, 0x58)
ioctl$TIOCNOTTY(r7, 0x5422)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f0000000700)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640), 0x0, {r0}}, 0x58)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:14:29 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x18a)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r5 = dup(r4)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1)
recvfrom(0xffffffffffffffff, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r7 = dup(0xffffffffffffffff)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180), {0x8035}, &(0x7f00000001c0)=""/173, 0xad, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[r6, 0x0], 0x2, {r7}}, 0x58)
ioctl$TIOCNOTTY(r7, 0x5422)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f0000000700)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640), 0x0, {r0}}, 0x58)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:14:29 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:14:29 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

[ 3278.269933] loop3: detected capacity change from 0 to 40
[ 3278.277976] loop4: detected capacity change from 0 to 40
05:14:29 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:14:29 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:14:29 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:14:29 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r3, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r4 = dup(r3)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58)
openat(r4, &(0x7f0000000240)='./file1\x00', 0x101000, 0x24)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r5, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff}, './file1\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x90000, 0x104)
inotify_add_watch(r6, &(0x7f00000001c0)='./file1\x00', 0x400)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:14:29 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x18a)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r5 = dup(r4)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1)
recvfrom(0xffffffffffffffff, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r7 = dup(0xffffffffffffffff)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180), {0x8035}, &(0x7f00000001c0)=""/173, 0xad, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[r6, 0x0], 0x2, {r7}}, 0x58)
ioctl$TIOCNOTTY(r7, 0x5422)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f0000000700)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640), 0x0, {r0}}, 0x58)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:14:30 executing program 5:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x8, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1a)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = fork()
r2 = socket(0x2, 0xa, 0x2)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aa80200000e0a0300000000000000000002000008080004400000000108000440000000030900010073797a30000000000900010073797a31000000000900010073797a31000000000900020073797a300000000040020380040000801800008008000340000000000c0005400000000000000302200200801c0202800c00028008000180fffffffd2c0002800900020073797a3100000000080001800000000408000180ffffffff0900020073797a32000000001500010036b14722d2c064eaba2810fc47e5671f8b000000020101009b5a8f6a5590a4c3f91834df869e057cd6d087df165343b7c940136948ce8aa9268af7839c93532b547b3831a2e54c4a28d1822f55675754ed6d0564c80a05bdec6a74b4ef234329b47ca36bf4451cab03ae3aa1fcbe614bb27795fe6ba4b2ced4eb525647acbe4904842ff0f0f1e335ee3cd5cdadd4c1890f1b5d3091e559485dae08d42ec9eec0bec4eb6ad6dad86a068e56dd8750aff6f825bdf0a185d594fb8eb2dde95fd6059042e2b0582a302f60a3c6e8712637c4da45a59b66a3cc8604ae0a4c18d8229c46317ff1b46b9c25173541f27ac52d9458e4144eb6f69a0cde48b4c1e5d4da71731400f89156fcd40300dd36dfb6d794dbd6aba30c9e00008d0001005c8af648e853ddb89709f744be225c60ca387c72cf28e405a7bdae94a6295b46533e7c8f252dbb66a9b907e0b083176fea1867893b6b95511e1d0c52dc7d45d93dde831a8ffd5b2f7422a7efd44f7f6ca9ad2feac1a91bc3dd67c50169caaf1ee91f5f8914da65fb425412b7e9090209e629d656d12aa13c2800c459a4afaa4579b8aaa1783194965200000023000100bd76b9d2355050edfd3960021478386976bdef4c642f2fa6d4f99da9846c3900100002800900020073797a320000000008000440000000030900010073797a31000000003c000000090a05000000000000000000050000090c0010400000000000000005080008400000000008000640ffffff000900010073797a31000000005c0b0000060a0102000000000000000003000000eb0007400686a66ef0c75f0f884918487bd32b19a10c6e500e7d31a3e0f45dee2cab6ae779173e058a3a79bfedb2b723de81f70c058e41212346a3a63b7652aba421424964bad4fc4d712802f688a162e3e39bd2f0aac6722cd629ca2843adc9cdfd3842e18c9e9d39542ad10a5b4421754aec2a26df00add00c970e7e965ca0575f1398d11b0fe0b9e386b2f4bce142550b06c3b2d965341e3bfedcc42d1179ac6c7d70be8f11ad6e465ef289a7abbb50857c23186775dedb550d90d86518727ecf0f56453e31554777674ab8fd5883ad1291186c59a7f95e68f50b6cd94f83031b5c867c5ec9bade0dee0008000a4000000001bc020480fc01018008000100647570000c0001006269747769736500dc010280a001058094000100a15f625029f8016b9c841f4324d7000fe388b174cd63f1422a7ff145a3d885b3ea004b76c5b0f7f4dc1f154f6a90be569bd128b8628eeacb186c2ff684f40d5ca3e9df65a5c4840d79c04051e6fb2f5e10788ac52e37fe04eebcfc56858eec67d0adaebc595176b704c39095675b79612ec8276a70001ddf31eb9b956aad0b7e48473463183dc5bc10a3a530cdb89a483c0002800800018000000003080001800000000208000180000000020900020073797a300000000008000180fffffffd0900020073797a3200000000cc000100907bcdd0c06fa40a1d6c45e56154d9682392bdbfc76afd0f481b2a75de70d2a77369823308f12205876fdb523254286af9a05240e6d4db0a2ad46e2011c91ad187a57f925e7f8161e0483e13eb0c71a340b9ce4079e3a9f846a7bed1e6eb4c3375d4d8d0c99aff44ab323c912bd19c870c821f60dc4be37c19123b9527d4985601f17d827d481e7f57e325d42cf8b1214025d491d60bbc59b0a08a90981ded3a122d39a69bb86f1a7d2ca329657b3942ef5bbd73771cef883c64c4a536141165af8fae9622e3d8e7080002400000000f080002400000000d080002400000000e0800034000000000080001400000001e080001400000000c0800014000000000080001006475700098000180090001006d657461000000001c000280080003400000000c080003400000000008000140000000080a0001006c696d69740000000e000100627974656f72646572000000090001006d657461000000003c000280080001400000000a080001400000000008000240000000080800034000000001080001400000000d080003400000001b08000240000000030700010072740000240001800b00010072656a656374000008000100647570000b00010074756e6e656c000008000a40000000017c070480100001800b0001007470726f78790000840001800a00010071756f74610000000b000100736f636b657400000a00010072616e6765000000080001006e6174001c000280080002400000000a080004400000000a0800034000000001090001006d65746100000000080001006475700014000280080001400000000a080001400000000d0800010064757000080001006e6174008800018009000100686173680000000024000280080001400000000a0800074000000000080001400000000c08000740000000000b000100736f636b657400000c0002800800024000000008080001006e61740034000280080004400000000b0800024000000002080004400000000f0800064000000008080007400000000008000740000000045c060180080001006f7366000b00010072656a656374000014000280050002000000000008000140000000020e000100696d6d656469617465000000b0030280200002801c000280080001800000000708000180fffffffd08000180ffffffff08000140000000121001028038000100887e88718613761bf168d26082b379ffae982149f1e6c42e049b5457185f66d62124e1983f6a691338e6a16b79e3127f270308fe83000100e1cedf4dbeafc64a6454a8216b42c20fc1b1e6f41d2cfbc06a4130090cd23063195da961ab6e70fce89df362033a5726be828332fa5e05cac96444c93a6112c3a897d9c09b02c7e517e770fdd2d51334b510ea3072e93ec846da12212410aec0b5e3ac949118de291a1906b373ac1728dc4377d9cc4f2a20d21d44d145293d00440002800900020073797a31000000000900020073797a300000000008000180fffffffd08000180fffffffb0900020073797a31000000000900020073797a31000000000c00028008000180fffffffe6c0202803800028008000180000000030900020073797a310000000008000180fffffffe0900020073797a31000000000900020073797a3000000000bd00010064d870f7a2180c3b17f4c594dcc0409b99e09b745f18fd0d7acec36f45a956ae0221af947c913ff1ab16a0470562d73044a30283e749e21330ee37ba281ec9de56efacf79453b3de9bccd757feefd44adbdf1447ff502321b24830ca285ab441c0b5af7fe319054dfb1b6f6ab952d9e08feef0aa2bddbe7938c24fbb7456c2622601511c7c4e711b2104c265d7abb504f78a023b398d099586ae9fd5e914b6e016ded080123d210a2649575ed930d10e55df262268929368dd000000cc000100b3e92ef2c3f002f352ddbb1bfa3788eadb49ec564e11a5622b949f22c8474a348bc37cc723c447d17518c8307fd6e3f3b43bae1b9093beea9f1df66ef66cda803460414eb802a436eccbd56373674091fdba03dc98e5017887529c8dd6571dc69cbcc139c5fa9faa012f947ba0f4c5ffbf7dd62549c90410c86332291663f7cba990c7567b8295e2035c22d4fbe82db91e356e4e13cdb5789476db37406b36d575b555c227c626542b20d2dfc95764d9950f9f036f2faa636aa2a33ddbac7b619a9175e30dd6269d92000100a4badbbfd062fd8bed4a5ab81566c5a02fd173877bbcfd993f57d2f9ca77d936fcd75e78ef9f6b83da2239f197462a33ed65861f3f0f990ba65ada43f003445c0cbf7d9695c283dccf2c0d6ce36e8fa74fb1c61ec1c6229d3cc63449d97167f28429ecd069fb03dd478ce0d8521ba1ffd90372ffdaf3438e7c6176288bc8b2d52926210a267d326f7236211153a30000100002800900020073797a320000000008000140000000140e000100696d6d656469617465000000540202806c0002806800028008000180fffffffc08000180000000000900020073797a310000000008000180fffffffd0900020073797a30000000000900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffc08000180fffffffb080001400000000c940102805b000100b93acd17f123f57a578310cb6cc7f6503ecbe627906c65b57479ad529cc2bb4ebc610a1b2a95a034ea3d9714276f838589271e556101ff7c0dcdf47510e93b77ca1f939c93ac779b1f6ee57ee8b23fd24dea4e122e4846001c0002800900020073797a31000000000900020073797a3100000000340002800900020073797a31000000000900020073797a31000000000900020073797a30000000000900020073797a30000000004c000100d726b09edd0f4ffcea6d3562c514dd2d4edba136f128aaf70495877a554388826dc1b310b79627be74bd3ac3d831622fdeec791d0ca22224f80013138059b829dac0b3bbf46f709a0c00028008000180fffffffd540002800900020073797a32000000000900020073797a320000000008000180fffffffc08000180fffffffd08000180ffffffff0900020073797a300000000008000180fffffffe0900020073797a32000000003800010075b87f1a8095acc9d341c25ed1d89c8aea2f0315c389e2a2e881ddfbf3ed050e7f4d3717959f2de9f3c9c1923cae7bdda85f6958100002800c00028008000180fffffffc080001400000000d300002802c0002800900020073797a320000000008000180fffffffe08000180fffffff80900020073797a30000000000b0001006f626a72656600000900020073797a310000000008000a40000000002c2400000e0a010400000000000000000500000200240380240000800c000440000000000000000108000340097ae5a80c0005400000000000000020f0110080ec1101801c00028008000180fffffffb08000180fffffffc08000180fffffffd7d000100e6d41bad098a4e1ccb6638024409526b5ee50bac6f9d595d7d3272d2836ef94181cd38034d1671e2641f20669b17ea360d6c97940ec8f8730cadd57a312782e6f3612375799ce30bcb205e6a919f66c69b7dd8367cf703cf32d0dea95defba2378e7ca6c53a11195f6acfcf7cf95ea1b069fed91f710808da40000002f000100cd17829d36d222c498bcdbd32953a2559a5c5751511427b082604092f8527efc4e31e670c948a49a9287cb005c00028008000180000000070900020073797a310000000008000180fffffffd08000180fffffffc08000180ffffffff08000180fffffffd08000180ffffffff0900020073797a310000000008000180ffffffff0800018000000000bc000100a814473d4681858138df7343c5aa7aab733f9c31fe51d0e0867490faa499ccfd2ad09892fbee1379d558e9560bd908a89d12166a1ba446c83b1d65fc0e835e64ef7a03dc83b03633d3f7b82d819e0758e6e01b1284005039c52d04a87b34471ebe383c70ac0f3b22ef91ea9a01054ee322329b3e1a7bebda421fe0f9ebb39a0f95263542ff4bc5fcc101ab15f07f4ed10b7b41957e6ebcc914fb542908052259205c507cb0d0c26fb1ee49b0abb90e8a4c3335571b65899b0410010006b46f43f181746ea48be23d7fefdafc6a3a8d3f7a479865a3d26e1f788d92d127f47e80e8fd0c8b7e68030e2cb4ae10fd3299bec0a6ed836fb39163c67d2a035ba7701f03799bb8d007fd0af86f400e2b014e95e21919a87612cac5bc6736310f520317f4f1a6a0de90c72df480eda90c0bdd5353a0bbd772d83b4e6596e55cc07ea1bc434848da7539acd19ff80a57bbd84ac495b0e60eff52fe3930bb718bf173b6cbecc8812159aeb7f8a0d62cea2d889f8c7140bdc3801e870eb1513519f085f08ec9304ce3735ee6f0f45a2b12368002f749abbc9c2ed0c7e26015a790e5156c8853781275728bfce4d9fe87f7bf45d10827bccf51e258655eea407f41a42990eb21c74f2ce5163f0fae130c0507d3ccf1e0285496323d47bd11a8437c510496e590cc5bbf162533afb170df10cd752565f1b246b02511efce6392bc5a2cc65b83f1c2f844fd3d95c7d6692cd7da3cdaea914122fe6bb2f9b9b185be08f658fbcff0e54cbb1f49cd622d3a911ac61e205f5231c17086f4d21d9528809743a70a323b0f6cbde459cedbb4eb62804fca1993db878fa7f3ff556a28d4460d1063ec9201db316c8f3732717cf565ec3764b252fceb195101e02348f24570f8e75859371f6c2ed13c55777065bd2b3dc18d9706f8e4d492acaf7c4bec03de8a7626fa06d3cc5cf2cf01c87f0fe1b4aee8ccf6889ad87862af37b9008d5532ce167e7e0e78d4cb0b74d2e950f9ec46cd24c65c2b2a3c423a062836200999c6a6159cf90234df741993f43ff2d20128914d5d80d87a0f3b18882a2087d8ba75016aeed275e2a1820820d7ff397e0f4bcbe479fa91db0c2781e0c17cd2e12c44338c4980cb6c06b0c7894ef078a98b82294284977616884bf08e8e6845efbf0cb80e459e095c5ebd40d88903ffd144387ecadd66cad82893db7076bc9459dfefbd28c0ea1c0d763f5faff1094eda69e3720f5ef8cfab1b84a87e5afceed9b327753e3a7c01000000f8e1c90d17c9dfee7d04c5acacd7da43a1aa78a4dd074a19ebbb6249da4f41bf4acb58801c44f75b9962c0ea8fb7badb5b45cd3bf83b816da5229f97e2501cfad21067305ad7ba3f6057b50aef4e35974c2afce19ba12e0536521454265b7620b699ed182b7b35acfd26179342aef07ba3ea5ad69f087a910ea7bae5d3508c85ada3850ffa865fb135463cf6f932b2f365618636ea7afd50eff574651b592a380d9820d12ae5ed324b06583b60f4c09de304d00b0221ec08d42ed969284272476115c13d1ab5cecfda2e33aa8fbba20fe351c85866918e9e65452661578cd06d9019063d93fd86b6c9f902aa7b5d3074ab12a8aabbd49971d9ca0b2ee9b5f7d6a4f24bbc29296acded935f99ced8051312ecb4e6a340497732240ef7e7bc439828fa785358c869cb69b6d5f62462dee9b34a21c3a8f08a046cfc4f52ec6be9266b93783fb7eea16da409d4f294cd696dfbb233af229f47b226b8b1ed295c7c07d4a2a26c4658cc6cc6c4ea1b4d0b3009cc65e51abe025b6550f4ebe21538042e59bf2223201e670f0ae34ba5b3dae581bc287ada9d4280acc9ef34e55d869d4fb82ec7b3c54a6fcdfebd68374ad62fd6c0cb74b551a08f579c643f35cf40dbc4ab9347e8005b6f4068da30d743c3de03497e5631aeb2e4377d8ad08c364915d42bd039c900a98c313eab2fbb5001d775dc5983de3fb83c64b4524d5295d81ec042b943137ace16820ef7fef90221534756c2b45e6181447100e765325a91abe83523db323268f62c9645ec9cefb3b8e778c8420f8bd8d00f501f099eb70cad37b726f429a0f1039ba23e99a4536f9d12d3fd14cbf51efd08f092a5c58f67196a1516acde857b363759614fc5c04b78028ec4b6ec645ec5049f1db14c4780749171b827290ec56b8eca7ad524e6317dfc8af221e30eb0d622eb662819e0ab1566ee624a1a717f929ca69b009b15b75d578e18867dbdb498a4644ae86418e6775edcf71e890a77fc067853fe2c4efabc1070a9ba5f7b430960bc0bc48bade3cb589557251116820371bc2a2e569b31cf7585601675c0f9db3e25a40cb5f13b7bd4c5cc4ef7435b11679cc2eb6d24c0bd0cf28ebf9c4fdac2d620f1fcce0504423f4f2af08ec889c4b7b962fd266f75477ab810510fdcc223993b7997b4f556444686de0d6870e265a17de1390fdb4b0a33ee8120f7d41c4f34104d50424e0f443683adc71ff9ded3f5df9484f181b990833802aa0b7854543c4b6c4e04ac648bc279c0e9c5e34c1b099dc71829a0a048de5ddb6efc1f322749787ec4f6e78f220701f6ef7136fb1cbf4956f9a058989ab6d4936c1f0c064dfc09a14e334b3857a50ab5d0376ae71015ab38ed8bd15f3e43caa3bc09a557822c0f44b91365532916cf93cddb7de353144307b07765936488811031c253962ecd60f1108bdd398087a44d13dbbf2fc6dafc8ddb578c21123ca03a81a098d3b3aeccd8f8baaeff8469a03976bff7be1b2bb050c83f92e4088cbda65b9e40adc141418aef336f8549724af1d951b969f461456b34e8b6cccb21a009bd4d20ad461af4ca33cfe8fa0b4dec32949ac5ea9e5d2b0e475363a2569af9370c28a03e50d4dd44c6de822da2c6a71434dc746f80ea8237093eb8654c048bbbd0759db45c6b28a666cf354ed7000451050eee23cec9881123186685a1f60515c1e49034030c51ee1b89087103afcc8072f29b433ea65e59670f7fc43ae56ac1a235952febb0325d85340b45f1b0fcf2cccace10e54da7e5689f45e24fb309f176db8c53053e7b6c2090237bf953eacc2aa342e632d468608d25433a900fa02acad19058d42b24e5f1f43d037fee34bfc48b1894d92b01ca0946b46a0ff5125a99f202001ed73675dc75235d3c9ee3e3b77120441e7d6c6fe18a643ffbcfd36167994b95a819055221262331a191edef0100a83214e3dcdf38588fa607fedbaccee37588c1bf4e27dd4d58a6e2a6c4e9c6d4b264f50a37db6a3653caa75ad6f823119f9808bc641aebfe94fdacd2e2982441570355d94c62b6411a4081c6812549d92b3d57de17d9537127aabb24a3cc34bac2642ae2a0d5e09d4398f53bb2778ceb46ef808912ad5d14730b87b4a654868681b03888784b8626d454234e8b6aefecfdf55a5ecc6cdc502e67ea50a9f862acd7a8134e95750d7928bd32cde656eb36a98fe23c76b794d85d9ae09ac5716134b9a16d80631271c2547c474992f0c869e39bc1e96fbade6f9add81df88e03616d5561562dfe7ed410987e6beae15a60b084f117f6e7dfbbec3e5c69f1ce63d27c8116fa5a7e1a9ad47356e41cb6f8f99d35be0e1c0d499e657140fa738526bc5a290b3720f16676f316132a04c2088078173a63694260edabb9d3cf24caf4add7a94fa4e289902a1ca601e4cdb9fe544ee9e1d49a380319e3c268d6ef916c00fc4ca9a83ed5f2cb6147e45b55caff5d4f91238072767b463cbe55f9d4fe654005ac7da03c01ceb1679c00f126f76c9243add1c612fde1abc74ac5428a09179dd10cbbfe26fef8543d5d05eef656bdcf2e1dab4643db0fe15eb2c6dff4e5848867ae8364196ddc7149d98804a5b67a6f764a551a0dde9467c08452c433b5fba9679c9e869ced85a2352e9918ad0febcc26adb9490ceff7710bd02dbd18ad8b9e8f13b237ae0fba23ff954f566c9e7b8cd7f9c3c948a98d6e7b0c624a20090fba72ead86e1abc91b4e5167092202d1456ec6c168eae7eb8c8acc6eff16830492a94ba0f113a675b17319b66d0f53b448957223ad00a049bf25d36bf10c3bdda08e760381fa29dbd8c0444424691ac7fa36978589e9abcaac855df624099e2284a839ee1c70e2929d082d7240369673f8f39963833f1dac1a7f132592f2ab94b721278fb669c3e52035fcf573d64ee96aa41b68aad6bbc361adee91f501bc99269f560bbd553a1d4e42aee0671f76db438f76fa7149eef4f13b1f244c269fe2ed28a89c2dcaeb630f1ad02c94b8ae2a4cb88cd427b5d5aa29898b3c393b8333ab936a7d292905db79a0ceefd0c227750f6277d478993275d400d9d9efbad72b1c716eec1ca0a6fc5b2b63f810b792c8f9de43f096f69c8938b52cd246910238e81bc4dc2347d1d42d9512b32cad2c290f9af85d206090a2347559e05689f690db11a7e2c854e14af6075b41adbd7ccb7774e957e441cfc3c230d454eb5cbb868d9cc74bf798001239dee69096702a2729061ce025b196f16c59a569648ce5e050738793b1acd81f4ee5e031716e9290d8a6bf45d95aeaf4835d5b89646cec0ef82e6eb5ec9735e87a752b334651b1b16e1fb28f12e5bcee8019270d7db706cadc9e5650fd3165d90a6bfb2e37bc9c68062706c5fd5da8052084c72554354927085c844bb697a45beefe59e92c9fa65f258c6e1fe266da04f064cc3bef1f1a70fc8a4bad150e77f989729859244a227e238016c08cf98aec7864708f3b4c164d5f73a72b5965cef7ad8a9fbd5d1690befb52f6596cf24749e5eb98ed84b686e51100d51bd7005c33e12dc94e472071af5d5aade47653edb831a7ce80e3ad4d7773a6216f398f0beb111397dd76ee2d01f5545e2f36df848c9d064ce5a61975bcd075a70df3cc27476586101279b8412e76c396359352f697452150d13ead4b321e4faa413f0236c2b4c8a17ff27e33e64490b4f79f9762e26dd76b4f3de5743659a80dcffff57759f7ad8c6743132afebe7501da8f1bde7f591d908d21e250548a2eb7bc2ec042c83a1c793afba21eb3cc23c52e21725a0508dc904eebe939cdff7c972b741c8329469e44345a65fa5eff7284bcf704026935a896e480c32c0fa6cc1c448a775d9a0749900548ea766205eb47cfe12f10f78038c7d9f9e0493b5165d01f8371cdc0eab4db69afac2c964889d54db50a753033bb06b8091f4b8d21cc47c9841c4f49e395a0de3776764756b696b866d51944a03ee6dd6f7927151cb930827707b4b222afb97993d3438456c9d2c76d846e5bbcbe66669c6f481c3f1da55f8a759ced9ea163fe8fba79c2a708a68e830fc5f9f3891c8ddcae04c1830cdcab909faa9bc0536701c0670c9e3d7588328095e6e4b29d17f1f429f47b714608b386683a2c64394f02fcb37329fa4a73911718b5c62595a6dea6e8b117e23bd9b1c6575bd47b330fd7a09d9aa8ecb10caa11300b04426dacc2eb6030d6fd55c282ee5cde0dd430d7cea11c2c3337ac911aa1337d7d1ece6ee53a91117ebf8936fe66858afef6d921f4789f406fc8c084b2865d76be25b7efca88ca1d28209337ea5c2c04fea2cc152b032b9d6f0e378dd3c30f09c8ae5425dc2a4ec3d5bafee2f01d34cdc6ce40fc44f3ff38226812139d74bf51999dbb9d3e2f19b855852ce4aac7cab85088860dad860e1fa677ed021bb3782ece946c2247abdd31ec68c978df1e8ffad70c8a67937b0aaff916e13b128b152b47a10c390e1b3523dd14e4837cffa8dd4c6ac3b090a935576b3e087b9c057cff804db50b8db047e69279a48bb3944edb6a8fc715995cdacff6a8963278482839c8abe6824cbc14d3f450fa800b9f888a02b1cfd5efd6165fee4cff30529dccdb372a64bef8b0f170b761ee69bfdbe4fbb79a98086a885945dea285b85770c08b93da86280dddb26c3feb5febf8cf0a86bc5c69eb4a3083291c9aa44f2eef5e9539a639b095ee303a443b2b7c184b20a910123e596dc6a1b1c9c001cdc31f2d2c4dfe9619f5243d3a8a883832960f417f3b4d78244dea5cb000df5a7a99b53cfaeb0c8f3e17ccd29c4073940200800900090073797a310000000084020280500002800900020073797a31000000000900020073797a300000000008000180fffffffd0900020073797a32000000000900020073797a310000000008000180ffffffff0900020073797a30000000006b0001000611a2699e21b1b39b47290a8d9a1f330fc25a47cef3ac54f148619c52028442c317f2c4f91c13e843b3c9b3106ad92d01a1866c3d9fc8c0ca19cb92d03454b2b6bad8f840717967baac241a6b01d48081d890ab214d4176ae523a7028197b367faecb9406c6e9005d000100f0f70afd29da0ec92a092cd7ab605a26725d273e8bcd6b696a7e0852b21b6372f1cd451e4bc89ec7df812494ffd7207153f7ff3448aa2b2327208a929565ac034a0cebb9f385ffa4f23d43ad180784d0941744d6c6b93b9db700000045000100aa7701927a9641cb7066881176a881f8df8684ef9e1382fea1db12375bd646c588dfc7e4d7726bd9650a9499b5e79ab43ea68b9172bbb9be8c20197fb05b1f99c90000004300010070fe0b43f85f797915735713ff529ebd3154585b40d0fcf85ab2343e97cdd8433a660656210478d7a6c7f4ed552ca97ed3d7004f596a007136d0d8b0f0b833000a000100170292b7931000005000028008000180ffffffff08000180fffffffc08000180fffffffe0900020073797a32000000000900020073797a3200000000080001800000000008000180ffffffff0900020073797a3100000000380002800900020073797a310000000008000180fffffffc0900020073797a300000000008000180fffffffb0900020073797a31000000002c0002800900020073797a300000000008000180fffffffb0900020073797a320000000008000180fffffffc160001005df419f2a727de2ee28411979a93982025470000a400008080000180180002800900020073797a300000000008000180ffffffff2000028008000180000000000900020073797a300000000008000180fffffffc4400028008000180fffffffb0900020073797a320000000008000180fffffffc0900020073797a310000000008000180fffffffe08000180fffffffe08000180fffffffd0c000540000000000000008108000340000000000900090073797a310000000084030080040007800900090073797a30000000000400078054030a809a0001003ee65e6ccf3d2d8bfd3b88da04ef0818d8e09e5b95906d332e95d2436b653bb633d38b68977c9c22d101a0c65d60dfba69c4d5f0a04a1b1265a63a06315fd354f5af38cb9eb0e08891b9f763f71ec2879cc146141a5aaccb517919979a6421dcfa8b96672faaddf6eb00ea535cecd6a173b7c4a1d70d1ab6a879e9b0b75d44cd46377a7d883c627704388813345a7f1c089339a4a3d5000020000280080001800000000008000180fffffffe0900020073797a32000000000c00028008000180fffffffe1400028008000180ffffffff08000180fffffffeb1000100d2e70774da05c18a5783c4d9ac1b2303caf0cde1c3c9830451b334ec908c25f7499ef3164de5b594f29f6121f5ac18ace8513154a7206017772b1b31ad33e5d0c8c74e2522f6564c49ae069417b9e27292dc6b5e3ea43d22328e392c622c3806379485d698fe8c979a51fbd73c16ac267265194b80423965fbc2aafe507c65f7fd0d474c2acb9e66df765160668fccbb76a679ec950d3bafb5dc13f0112b47f3cc2bc5a37f13f1664277cb27f70000007c000100531ce5a082335ddd8571434408864b2861dcb619648765b533d28957c40de4caa8df54a238aa0917fc87c250b523549728755cefd802a3c85cec7975939fcebc5ba58c2fc90ef250566920ad60e8b39b7c74816ddf9dd14164e6db89e0de94742b773d3712d70523a33046c83ce2731a693b201c8bc406f4340002800900020073797a300000000008000180f7fffffb08000180fffffffe0900020073797a310000000008000180fffffffde900010023cd2f793947acd2ef1b3535700d2418a72d679396002fdf7c46cb68f9765c1a6b3432d83ceec415f5ec3baf8967a0a63438ef36fc8c053ffbec1560240a6af9fc70e4848ffb610f27dbe22f1f6898a446317935c113cc0d502d0a800c43e9e1068c92de8d9d8beefd2733cd48cb1d6b21e33e65162b3ba700a40eb0fd9efc2d7ee21281854ba3ef5f7206a7a36bea096754e70de887ada4120f2a399b2c2091b010bd7e046663264afc1389a1dd07ad524b54c85ba2a9c0944233b88408bb128273afb1c903c18f7ca5efb6361554a709af45363d409f0175da9cf462b41537180eba4f20000000240002800900020073797a320000000008000180fffffffe0900020073797a3000000000170006408acd72ae889077e0d191de68e8a7db945c4b7600a00300800c0005400000000000000101440301802400028008000180fffffffe08000180ffffffff080001800000000508000180fffffffdf0000100923a20d35d8bca33805edb61f91903a2d604a27e99da84320264cff53ac4fe541672b40f8231182dcbe28ee27b2238b548f0397b9b05dba4d043781051061995d85f9bb4df1a9fe67a45f938307b7acfd7b3aa4c8d9263097c38b5d0eb322b86c350306e425f3b0a2fd0c60ca0ab300cbda3106e9e6c427838a6813b20c8cf74474ecf0ad84dffb120acccf98ef6c3560d021150528c18dbe16aa7c896c356939f8bd6e0cdf5f3649da2c39be7d5ede310626a1d457107eebf2130d69c6aac0622b308b517e368e48c8bd7225c992eeade2638181b7fd67bbfc708e3493a69bac67bc1a74084f1f59dcac28db1000100b9be15bfc92dfe7aa6bd09a8ddeaa524233edd5f7b81d77c3d43ea445e0e21c8ab2ef87532f89a14f5dc91d9954a6d3ffd18dbb346b865daa0bdb94fbaeb8fc6fc1baf2965511d01df1ae8bb1e25caa91543e695014c8855d27471612ef577077f044d8361d15faf060c053dcca7d958c0ed366e99ef9c5ac5535cda2f52ba9099fc8cad801e4895e6f14748abd41a6da1ae6acbeb258ab92bccde0f27417aeef13af4e2b554982d9454a6320800000075000100e33c2899606e0d2cbd0e53a7292db4e77a483eb965fd6545a8692f16c8e772d957f47a9d70ea33972be651f6d8e91d09bfec172ac3c918c15e0e0887d288ec2e5398e4360fe7399a0e1e9aeb1a18ee8cb2d13c4f1804379278641d7392854b28323d8677f98d308a7c56667a1d04f4cfbc0000009e0001008f61081a0b19c79f406d410e129234b1d40b5704a7878eac232a6e120e8e60f55966b7e02d7295e69ac7fbb5bbba6bc077b6c3673802008f9b9a3d0450839344e3654dc02f98dbdc9018b7e22f3b11ff2508e0a2ab7cd659c8baa19b536b4fff185a2e45c56e9f1c2da5db4c01d777611380fdf4c553e93cb3466fbb6803c97cd3f7a5ffa116a2d15594c830999166c4d02001e0862b932bd0d500005e0001003f5744d1a3d8986f142285770f7f719d1075b427d2263786de1bcf2c211eab0bfb67a02da0c5e2c26b08700cc3f7bc570e84b41b0b9923da79462f7a4fddd87efdf0a2bd25c2fae6e480176edf13b3eb0c7f5b7580ddb0cbbc3000000900090073797a3100000000400002803c000100a155ee00d56d33bd4ce6414431e31e16e901d51b767eeb3ec51e80692ece3014200bddd01ba9e490e3ad8ee631aba664f5f92f6178756955d4030080200102802800028008000180fffffffe0900020073797a300000000008000180fffffffc08000180fffffffc1400028008000180fffffffe08000180fffffffed3000100d1b592f8103b783bdd01ec1c07201bf055b66528df9f9d6b029cc7da384719c99a69c4891326a18d346faafe623dd4241d9541ce0cf571b9e5bc4acf9473d5a151c94159e64ceb891b22a81b1b92ffd7a5205c083a584c638917573562aad795beb66fc8dabeeb043b0c434ae75376e1602cbfd1d4dc78f89475ae723d684f8922b0aabe6c92db67558088795204a0dbdbc44fcb18b71997cb42c6d3b8ca316036b7fb2010bd55108d09d8b1389857bb8101517023e107ad2148ae564014315adde3ea6cf3bd9202f1c0bb1b859150000c00028008000180000000000c00054000000000000000afbc000640dc7b218195d6e9837006b37330a2a823174148b2b3b9a16916e099decb9e6a33690fb9e37ba37f5ba02bc21cb5e3fcab080c989563f19fc374e23f72570ea0e2843b0518f56325b9e862b5706c015901caf8e143a584578539e3b10f237db089e8c184a95cb0c9bf81c1224a31be63546b6e51f69aa11d1c848bf7de61f5d6a86aac6fd0170c182b5c7fdee7227fc38a04e5a3ce51467a896d489c819975ee2ea5f2ddcbdd189ed6cef6ad293f35c60be44bd113c3d50f2804000780b40002803f00010052002fc7fe73327f3c3c99703083d7cd132c7cbd2e34f1dfee8afde09314c2e72c397539d59d58ad27493c0d67469bfe5c132b779dc3b933981e2b002c0002800900020073797a300000000008000180fffffffe08000180000000030900020073797a32000000002400020700000080fffffffa0900020073797a30000000000900020073797a32000000002000028008000180fffffffd08000180fffffffc0900020073797a31000000000c0005400000000000000003200101802400028008000180fffffffb0900020073797a30000000000900020073797a32000000006400028008000180fffffffd0900020073797a300000000008000180fffffffd08000180fffffffe08000180fffffffe08000180fffffffb0900020073797a32000000000900020073797a300000000008000180fffffffe0900020073797a32000000000c00028008000180fffffffd5c0002800900020073797a31000000000900020073797a30000000000900020073797a31000000000900020073797a32000000000900020073797a300000000008000180fffffffe08000180ffffffff0900020073797a32000000000600010025860000230001006dabe05a5dc067a99b30c2ff37ea725ea016c2abf4568bbb2a3273792e34a62e20ca7ad1cfb78a1e18120004000780f802008090000a806a00010043a83dc3069271a59d291278d751f6a2dd7a3ea25063db1a68e0dc73a4e9c501f95550be76ee54eeb791f85e343864308cd2848a930d67f9b7c5a467fa2235fa8102f9bebd3ec65c43ac17482be71b7282b05077ea427df76fd9018959341b473944f7c73cae00002000028008000180fffffffe0900020073797a300000000008000180fffffffd0c0005400000000000000100380102809f0001002f157519c50cc9bb8b88863daa265c877085b220f57c009965c4c5f7335aea2ec0a04919d3bdadcbfb2e884e4afdab6b0c0c9fc0cf81644ad0950703378da1e66b66930099b957f9fc5af750f182ad6e8b1dd4f0dfe53579452813068df01cd3679604506f2764b268541f2a1285c9f7ac2d109658dace0aa12476e97b9e645191b7f77d280bd1f6739bb011ca88d1c5b6312f80fcb2b02aa2751b5388d018d000870001006bae383db432d0775a6ccda16bcf810fc4b568d023332175b7ae784a331bdaaaff744e3aef93554a548ffeb0d112a9e0931c8b30cb31adf11890fe19ef46b1f7fc28377bba12757e5f894a9159462b9036d89f4a71aece25baa8e5098a67789275c2ff0b4554ddfeb16eb050757d5092d4f6955f79bc8d7e8ae9ccf5c25751f687c5aa000b0001007ebf6f4424a66e000c00054000000000000000090c0005400000000000000000b000018049000100b0df425283cd3761f7c43c5eee520ff7660cd088636038187ae4602c7c1a59802985902aad5bec9e025d454a72b89396852c3ffe4df4385abb701a4f0f099a1d93dd7d55e500000060000100f125e771dc78dd23d6876eda5d15ee49882ffe399b3a826e2d83a183c1fb099efc6b105c05c6358c6bf392be97aa0d67eeb1dcfa57b60d3aad4b4f9d9d60b3c7e44cec320a3d53217584fafcfc67a3701b72f211e54ed8663506e6b3040007800c000540000000000000000540000640abdfc847a63eefb96f1654703cf871341f01c760bfce8943d096e8d3f1a8c5c42dc3bcfe06f6ef87c62798ebb4faea2afadb3088abc60245e6f392150800034000000001c0000080b00002804e000100c31082dc7b7268f9e6fd6dc180c7e6748fb91ec294410d16802d957a7dc5f141128cda14b450caf674bf5caf284079fa07de9330984c0bedb408dc1fbaa7f0f67500b0947736addec7ec0000300002800900020073797a320000000008000180ffffffff0900020073797a32000000000900020073797a31000000002a0001001b24c662bc89155d8e673afd34e20d94890552026db24e3335457f42c3394e727e4fb511a26400000c00054000000000000000050900010073797a31000000000900020073797a3000000000f0000000030a010100000000000000000300000a08000a40000000020c00024000000000000000020b00070066696c746572000008000540fffffffe4c0008800c00024000000000000100000c00014000000000000000810c00024000000000000000030c0002400000000000001c500c00024000000000000000070c000140000000000000000368000480140003007866726d300000000000000000000000080001400000000008000240192f7339080002400d04faeb080002402d55013e140003006970766c616e300000000000000000001400030069705f76746930000000000000000000080002402419742438000000160a01010000000000000000020000050c00054000000000000000030900020073797a30000000000900020073797a3100000000dc000000050a010200000000000000000100000508000a400000000308000540fffffffc0c00024000000000000000020a000700726f7574650000000a000700726f7574650000000c00024000000000000000010b00070066696c74657200000900010073797a3000000000640008800c00024000000000000009b10c00014000000000000000070c00024000000000000000070c00024000000000000004010c00024000000000000047d90c00024000000000000000000c00014000000000000000010c000240ffffffffffff60be0900010073797a3000000000140000001100010000000000000000000000000a"], 0x3498}, 0x1, 0x0, 0x0, 0x4000000}, 0x4060)
ptrace$setopts(0x4206, r1, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0xc43b, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r1, 0xc, r0, 0x1)
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x5a, 0xf8, 0x98, 0x1, 0x0, 0xffffffff80000001, 0x182, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x220, 0x0, 0x4, 0x8, 0xadd, 0xffff5130, 0x8000, 0x0, 0x6, 0x0, 0x100000001}, r1, 0x1, 0xffffffffffffffff, 0xa)

05:14:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:14:30 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x18a)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r5 = dup(r4)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1)
recvfrom(0xffffffffffffffff, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r7 = dup(0xffffffffffffffff)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180), {0x8035}, &(0x7f00000001c0)=""/173, 0xad, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[r6, 0x0], 0x2, {r7}}, 0x58)
ioctl$TIOCNOTTY(r7, 0x5422)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f0000000700)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640), 0x0, {r0}}, 0x58)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:14:30 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc04c5349, &(0x7f00000007c0))
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc04c5349, &(0x7f00000007c0))
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc04c5349, &(0x7f00000007c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ppoll(&(0x7f0000000040)=[{r1, 0x4000}, {r2, 0x8000}, {}, {r3, 0x2552}, {r0, 0x3c10}, {r4, 0x410}, {r0}, {r0}], 0x8, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8000]}, 0x8)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r5, 0x540a, 0x2)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0xb8, 0x9, 0xfff7, 0x7ff, 0x7, 0x8})

05:14:30 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:14:30 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x18a)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r5 = dup(r4)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1)
recvfrom(0xffffffffffffffff, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r7 = dup(0xffffffffffffffff)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180), {0x8035}, &(0x7f00000001c0)=""/173, 0xad, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[r6, 0x0], 0x2, {r7}}, 0x58)
ioctl$TIOCNOTTY(r7, 0x5422)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f0000000700)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640), 0x0, {r0}}, 0x58)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

[ 3278.310054] loop1: detected capacity change from 0 to 40
[ 3278.342370] syz-executor.4: attempt to access beyond end of device
[ 3278.342370] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3278.342396] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3278.359765] syz-executor.3: attempt to access beyond end of device
[ 3278.359765] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3278.359791] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 3278.407437] syz-executor.1: attempt to access beyond end of device
[ 3278.407437] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3278.407466] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3278.472008] loop4: detected capacity change from 0 to 40
[ 3278.498378] loop3: detected capacity change from 0 to 40
[ 3278.550502] syz-executor.4: attempt to access beyond end of device
[ 3278.550502] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3278.550534] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3278.575721] loop1: detected capacity change from 0 to 40
[ 3278.629706] syz-executor.3: attempt to access beyond end of device
[ 3278.629706] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3278.629734] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 3278.676412] syz-executor.1: attempt to access beyond end of device
[ 3278.676412] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3278.676444] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3278.694510] loop4: detected capacity change from 0 to 40
[ 3278.824814] syz-executor.4: attempt to access beyond end of device
[ 3278.824814] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3278.824858] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3278.842785] loop1: detected capacity change from 0 to 40
05:14:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:14:30 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r2, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r2, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r3 = dup(r2)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r3}}, 0x58)
openat(r3, &(0x7f0000000240)='./file1\x00', 0x101000, 0x24)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff}, './file1\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x90000, 0x104)
inotify_add_watch(r5, &(0x7f00000001c0)='./file1\x00', 0x400)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)

05:14:30 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:14:30 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:14:30 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc04c5349, &(0x7f00000007c0))
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)="37670d6095e07e5b35af6ecf531dd5ca869b2e02b7d74e78b771333c8088d5d8021d25417d59ae64e31dcf2eee4addbc410c3fb9bf81047f7d1b84f1ce94c4c4ce4d17f38692b4e28b87120804b4d95736413687cd9b2bcfd47abbd0c6aa8856724aafc4ec923abacbbb7ec79dd18d0b052fb3eff56945caa4202716123b9e25e862c1ebea0fab1e7432080a6a3ac16684267eb45882841dba6b6ba3b37e2e33ab0c63f16a983147723522987b18cc98e277875b4434d218ef4486298fe6d4e88e5da99c992a764b7ed8c857f4b2e980ef4603", 0xd3}, {&(0x7f0000000100)="8104b5f1f7ff772b2d097bd3bcc56ade59549f1035e668fecbe369a9b9773e20fbda79b1a1cd0083", 0x28}, {&(0x7f0000000140)="622a8796eb788dab7573f2288d539898737196c7584ef4abd8e83ae3b3ea21d7b5979dedb056c9fd3a41169704747b82b88e8c02407b8b24f9a73967e0f8deadfa3d7a5d59e9e824e7f9f8b51fe368cdf855f34229c9a71373b93882cb9b926e234bcaee72c8fcec753e55892c11b0e095a41489026f3faaddffa917c043831057d365c94c32a6b03f10365d81584fbf4f7dc82c3c3bfeb4e5b1291037c16a1b3c114bf0f25f92bcfb", 0xa9}, {&(0x7f0000000200)="2c273f40dd3ad68408f42f49d658911afab6dfce5a8981196a8171d0fd21b5dc249d356a4b14d7e05c03d02d0115cd932d76f34fec67ec29658dcb6eca0035a8970cd469ff4dd02dcfcd3c1189dea7ef6f27dbbf846af1c235ed04cf54b51848c30787d753fb26cfb2dd392d8891080ef871d235ab358037c95b7bc7e2a84d037fd38929a5c85c0ac761bb9065ba008db20975e5a2470f741e162689d410cc67200717eab19ca8d442bc7183247f2c0920f21ad0da59ebd3c185ff57", 0xbc}], 0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
r2 = syz_open_dev$mouse(&(0x7f0000000300), 0x1bdd, 0x480802)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000340)={0x40, 0x1, 0x0, 'queue0\x00', 0x5})

05:14:30 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x18a)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r5 = dup(r4)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1)
recvfrom(0xffffffffffffffff, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r7 = dup(0xffffffffffffffff)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180), {0x8035}, &(0x7f00000001c0)=""/173, 0xad, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[r6, 0x0], 0x2, {r7}}, 0x58)
ioctl$TIOCNOTTY(r7, 0x5422)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f0000000700)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640), 0x0, {r0}}, 0x58)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:14:30 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r2, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r2, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r3 = dup(r2)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r3}}, 0x58)
openat(r3, &(0x7f0000000240)='./file1\x00', 0x101000, 0x24)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff}, './file1\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x90000, 0x104)
inotify_add_watch(r5, &(0x7f00000001c0)='./file1\x00', 0x400)

[ 3278.965155] syz-executor.1: attempt to access beyond end of device
[ 3278.965155] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3278.965460] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3279.094192] loop7: detected capacity change from 0 to 40
[ 3279.108972] loop1: detected capacity change from 0 to 40
[ 3279.110815] loop4: detected capacity change from 0 to 40
[ 3279.264047] syz-executor.7: attempt to access beyond end of device
[ 3279.264047] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3279.264085] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 3279.267079] syz-executor.1: attempt to access beyond end of device
[ 3279.267079] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3279.267125] Buffer I/O error on dev loop1, logical block 10, lost async page write
05:14:44 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r3, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x880)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010000faffffffffffff2c000000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x8044)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan0\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan3\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r5, 0x700, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xf5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xc6}]}, 0x58}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf252800000006000400feff00000c0005000202aaaaaaaaaaaa060006000100000004002000000000006304aed75cacb9821d858a56982fdff5f686e5989c5bd7742790564eb7d2c0c7f93b7a0abfd3fd8ead3032ab68678efa8ce94793567a1d524052606d15c4"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
listen(r8, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r9, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0xff3f0000, 0x0)

05:14:44 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:14:44 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc04c5349, &(0x7f00000007c0))
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc04c5349, &(0x7f00000007c0))
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc04c5349, &(0x7f00000007c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ppoll(&(0x7f0000000040)=[{r1, 0x4000}, {r2, 0x8000}, {}, {r3, 0x2552}, {r0, 0x3c10}, {r4, 0x410}, {r0}, {r0}], 0x8, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8000]}, 0x8)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r5, 0x540a, 0x2)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0xb8, 0x9, 0xfff7, 0x7ff, 0x7, 0x8})

05:14:44 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x4, 0x0, 0x8, 0x4, 0xd67})

05:14:44 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r2, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r2, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r3 = dup(r2)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r3}}, 0x58)
openat(r3, &(0x7f0000000240)='./file1\x00', 0x101000, 0x24)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file1\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x90000, 0x104)

05:14:44 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:14:44 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000004200)={<r1=>0x0, <r2=>0x0})
recvmmsg$unix(r0, &(0x7f0000004100)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000300)=""/135, 0x87}, {&(0x7f0000000700)=""/183, 0xb7}], 0x2, &(0x7f00000007c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000003ac0)=[{&(0x7f00000008c0)=""/92, 0x54}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000240)=""/63, 0x3f}, {&(0x7f0000001940)=""/112, 0x70}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/16, 0x10}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x8, &(0x7f0000003b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003bc0), 0x6e, &(0x7f0000003d80)=[{&(0x7f0000004280)=""/176, 0xb0}, {&(0x7f0000003d00)=""/89, 0x59}], 0x2, &(0x7f0000003c40)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=<r4=>0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00400008ca2c1355802fb57dac00"], 0x38}}, {{&(0x7f0000003e00), 0x6e, &(0x7f0000004080)=[{&(0x7f0000003e80)=""/162, 0xa2}, {&(0x7f0000003f40)=""/172, 0xac}, {&(0x7f0000004000)=""/60, 0x3c}, {&(0x7f0000004440)=""/102400, 0x19000}], 0x4, &(0x7f00000040c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x4, 0x80000010, &(0x7f0000004240)={r1, r2+10000000})
perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x2, 0xfc, 0x80, 0x1, 0x0, 0x3, 0x40000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0xffffffff}, 0x20, 0x7b, 0x9, 0x5, 0x6, 0x7, 0xffff, 0x0, 0x5a9, 0x0, 0x7}, 0x0, 0xd, r4, 0xa)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r5 = syz_open_dev$loop(&(0x7f0000003cc0), 0x0, 0x800)
r6 = accept(r3, &(0x7f0000004340)=@isdn, &(0x7f0000003dc0)=0x80)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f00000043c0)={0x0, r6, 0x80000001, 0x8, 0x0, 0x7fff})
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r7 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r7, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r7, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r8 = dup(r7)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r8}}, 0x58)
openat$cgroup_int(r8, &(0x7f0000004400)='cpu.max.burst\x00', 0x2, 0x0)

05:14:44 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3293.256224] loop1: detected capacity change from 0 to 40
05:14:44 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3293.275811] loop4: detected capacity change from 0 to 40
[ 3293.310639] loop7: detected capacity change from 0 to 40
[ 3293.370612] bio_check_eod: 1 callbacks suppressed
[ 3293.370626] syz-executor.1: attempt to access beyond end of device
[ 3293.370626] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3293.370644] buffer_io_error: 1 callbacks suppressed
[ 3293.370650] Buffer I/O error on dev loop1, logical block 10, lost async page write
05:14:44 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r2, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r2, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r3 = dup(r2)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r3}}, 0x58)
openat(r3, &(0x7f0000000240)='./file1\x00', 0x101000, 0x24)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file1\x00'})

05:14:44 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3293.471269] loop1: detected capacity change from 0 to 40
[ 3293.503667] syz-executor.4: attempt to access beyond end of device
[ 3293.503667] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3293.503737] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3293.546731] loop5: detected capacity change from 0 to 40
[ 3293.550547] syz-executor.7: attempt to access beyond end of device
[ 3293.550547] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3293.550629] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 3293.562886] syz-executor.1: attempt to access beyond end of device
[ 3293.562886] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3293.562907] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3293.683662] syz-executor.5: attempt to access beyond end of device
[ 3293.683662] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3293.685548] Buffer I/O error on dev loop5, logical block 10, lost async page write
05:14:59 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000))
ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x4927)

05:14:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:14:59 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc04c5349, &(0x7f00000007c0))
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc04c5349, &(0x7f00000007c0))
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc04c5349, &(0x7f00000007c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ppoll(&(0x7f0000000040)=[{r1, 0x4000}, {r2, 0x8000}, {}, {r3, 0x2552}, {r0, 0x3c10}, {r4, 0x410}, {r0}, {r0}], 0x8, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8000]}, 0x8)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r5, 0x540a, 0x2)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0xb8, 0x9, 0xfff7, 0x7ff, 0x7, 0x8})

05:14:59 executing program 5:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=<r2=>0x0, {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x6, 0x2, 0x2, 0x0, 0x400, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xbf, 0x10001}, 0x1400, 0x2, 0xfffffff8, 0x8, 0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x9}, r1, 0x0, r0, 0x1)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x14, 0x1f, 0x7, 0x6, 0x0, 0x43, 0x20, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x238, 0x95f, 0x1, 0x6, 0x40, 0x101, 0x0, 0x0, 0x7f, 0x0, 0x7}, r2, 0x6, r0, 0x9)
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x4, 0x80, 0x7, 0x0, 0x0, 0x6, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3ff, 0x9}, 0x240, 0x4, 0x0, 0x7, 0x40100000009e, 0xb0fc, 0x6, 0x0, 0xc, 0x0, 0x8}, 0x0, 0xe, r3, 0x8)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
r5 = mq_open(&(0x7f0000000700)='\x00', 0x40, 0x1, &(0x7f0000000740)={0x8000, 0x7f, 0x9, 0x4})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc04c5349, &(0x7f00000007c0))
sendfile(r5, r6, &(0x7f0000000780)=0x4, 0x7ff)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r7 = dup(r4)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r7}}, 0x58)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x2, 0x3, 0x0, 0x2, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000200), 0x9}, 0x10, 0xc5, 0x7, 0x7, 0x5, 0x1ff, 0x5, 0x0, 0x6ff, 0x0, 0xad00}, 0x0, 0x10, r7, 0x18)

05:14:59 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r2 = dup(r1)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58)
openat(r2, &(0x7f0000000240)='./file1\x00', 0x101000, 0x24)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r3, 0x0)

05:14:59 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:14:59 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000004200)={<r1=>0x0, <r2=>0x0})
recvmmsg$unix(r0, &(0x7f0000004100)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000300)=""/135, 0x87}, {&(0x7f0000000700)=""/183, 0xb7}], 0x2, &(0x7f00000007c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000003ac0)=[{&(0x7f00000008c0)=""/92, 0x54}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000240)=""/63, 0x3f}, {&(0x7f0000001940)=""/112, 0x70}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/16, 0x10}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x8, &(0x7f0000003b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003bc0), 0x6e, &(0x7f0000003d80)=[{&(0x7f0000004280)=""/176, 0xb0}, {&(0x7f0000003d00)=""/89, 0x59}], 0x2, &(0x7f0000003c40)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=<r4=>0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00400008ca2c1355802fb57dac00"], 0x38}}, {{&(0x7f0000003e00), 0x6e, &(0x7f0000004080)=[{&(0x7f0000003e80)=""/162, 0xa2}, {&(0x7f0000003f40)=""/172, 0xac}, {&(0x7f0000004000)=""/60, 0x3c}, {&(0x7f0000004440)=""/102400, 0x19000}], 0x4, &(0x7f00000040c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x4, 0x80000010, &(0x7f0000004240)={r1, r2+10000000})
perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x2, 0xfc, 0x80, 0x1, 0x0, 0x3, 0x40000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0xffffffff}, 0x20, 0x7b, 0x9, 0x5, 0x6, 0x7, 0xffff, 0x0, 0x5a9, 0x0, 0x7}, 0x0, 0xd, r4, 0xa)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r5 = syz_open_dev$loop(&(0x7f0000003cc0), 0x0, 0x800)
r6 = accept(r3, &(0x7f0000004340)=@isdn, &(0x7f0000003dc0)=0x80)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f00000043c0)={0x0, r6, 0x80000001, 0x8, 0x0, 0x7fff})
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r7 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r7, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r7, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r8 = dup(r7)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r8}}, 0x58)
openat$cgroup_int(r8, &(0x7f0000004400)='cpu.max.burst\x00', 0x2, 0x0)

05:14:59 executing program 7:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
gettid()
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x10035}, &(0x7f0000000680)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000240))
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
io_uring_setup(0x6b25, &(0x7f00000001c0)={0x0, 0xcd2f, 0x4, 0x0, 0x106})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xdaf, 0x0, 0x8001}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x800)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = fork()
ptrace$setopts(0x4206, r4, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r4, 0xc, r3, 0x1)
clone3(&(0x7f0000000080)={0x40020400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/191, &(0x7f0000000640)=[0xffffffffffffffff, r4], 0x2, {r2}}, 0x58)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x5e5000, 0x0)
fcntl$setstatus(r5, 0x4, 0x46400)

[ 3308.192991] loop1: detected capacity change from 0 to 40
[ 3308.206063] loop4: detected capacity change from 0 to 40
05:14:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:14:59 executing program 7:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
gettid()
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x10035}, &(0x7f0000000680)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000240))
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
io_uring_setup(0x6b25, &(0x7f00000001c0)={0x0, 0xcd2f, 0x4, 0x0, 0x106})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xdaf, 0x0, 0x8001}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x800)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = fork()
ptrace$setopts(0x4206, r4, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r4, 0xc, r3, 0x1)
clone3(&(0x7f0000000080)={0x40020400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/191, &(0x7f0000000640)=[0xffffffffffffffff, r4], 0x2, {r2}}, 0x58)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x5e5000, 0x0)
fcntl$setstatus(r5, 0x4, 0x46400)

05:14:59 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r2 = dup(r1)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58)
openat(r2, &(0x7f0000000240)='./file1\x00', 0x101000, 0x24)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

05:14:59 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:14:59 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000004200)={<r1=>0x0, <r2=>0x0})
recvmmsg$unix(r0, &(0x7f0000004100)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000300)=""/135, 0x87}, {&(0x7f0000000700)=""/183, 0xb7}], 0x2, &(0x7f00000007c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000003ac0)=[{&(0x7f00000008c0)=""/92, 0x54}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000240)=""/63, 0x3f}, {&(0x7f0000001940)=""/112, 0x70}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/16, 0x10}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x8, &(0x7f0000003b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003bc0), 0x6e, &(0x7f0000003d80)=[{&(0x7f0000004280)=""/176, 0xb0}, {&(0x7f0000003d00)=""/89, 0x59}], 0x2, &(0x7f0000003c40)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=<r4=>0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00400008ca2c1355802fb57dac00"], 0x38}}, {{&(0x7f0000003e00), 0x6e, &(0x7f0000004080)=[{&(0x7f0000003e80)=""/162, 0xa2}, {&(0x7f0000003f40)=""/172, 0xac}, {&(0x7f0000004000)=""/60, 0x3c}, {&(0x7f0000004440)=""/102400, 0x19000}], 0x4, &(0x7f00000040c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x4, 0x80000010, &(0x7f0000004240)={r1, r2+10000000})
perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x2, 0xfc, 0x80, 0x1, 0x0, 0x3, 0x40000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0xffffffff}, 0x20, 0x7b, 0x9, 0x5, 0x6, 0x7, 0xffff, 0x0, 0x5a9, 0x0, 0x7}, 0x0, 0xd, r4, 0xa)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r5 = syz_open_dev$loop(&(0x7f0000003cc0), 0x0, 0x800)
r6 = accept(r3, &(0x7f0000004340)=@isdn, &(0x7f0000003dc0)=0x80)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f00000043c0)={0x0, r6, 0x80000001, 0x8, 0x0, 0x7fff})
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r7 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r7, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r7, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r8 = dup(r7)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r8}}, 0x58)
openat$cgroup_int(r8, &(0x7f0000004400)='cpu.max.burst\x00', 0x2, 0x0)

05:14:59 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r2 = dup(r1)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58)
openat(r2, &(0x7f0000000240)='./file1\x00', 0x101000, 0x24)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)

05:14:59 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3308.271838] syz-executor.1: attempt to access beyond end of device
[ 3308.271838] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3308.271866] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3308.282326] syz-executor.4: attempt to access beyond end of device
[ 3308.282326] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3308.282347] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3308.396970] loop4: detected capacity change from 0 to 40
[ 3308.397879] loop1: detected capacity change from 0 to 40
[ 3308.472784] syz-executor.1: attempt to access beyond end of device
[ 3308.472784] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3308.472812] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3308.474872] syz-executor.4: attempt to access beyond end of device
[ 3308.474872] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3308.474892] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3308.649886] loop1: detected capacity change from 0 to 40
[ 3308.765004] syz-executor.1: attempt to access beyond end of device
[ 3308.765004] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3308.765133] Buffer I/O error on dev loop1, logical block 10, lost async page write
05:15:14 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r2 = dup(r1)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58)
openat(r2, &(0x7f0000000240)='./file1\x00', 0x101000, 0x24)

05:15:14 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r3, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r4 = dup(r3)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58)
setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000040)={@rand_addr=0x64010101, @private=0xa010101}, 0xc)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:15:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3323.237940] loop4: detected capacity change from 0 to 40
05:15:14 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc04c5349, &(0x7f00000007c0))
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc04c5349, &(0x7f00000007c0))
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc04c5349, &(0x7f00000007c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ppoll(&(0x7f0000000040)=[{r1, 0x4000}, {r2, 0x8000}, {}, {r3, 0x2552}, {r0, 0x3c10}, {r4, 0x410}, {r0}, {r0}], 0x8, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8000]}, 0x8)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r5, 0x540a, 0x2)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})

05:15:14 executing program 2:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=<r2=>0x0, {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x6, 0x2, 0x2, 0x0, 0x400, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xbf, 0x10001}, 0x1400, 0x2, 0xfffffff8, 0x8, 0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x9}, r1, 0x0, r0, 0x1)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x14, 0x1f, 0x7, 0x6, 0x0, 0x43, 0x20, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x238, 0x95f, 0x1, 0x6, 0x40, 0x101, 0x0, 0x0, 0x7f, 0x0, 0x7}, r2, 0x6, r0, 0x9)
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x4, 0x80, 0x7, 0x0, 0x0, 0x6, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3ff, 0x9}, 0x240, 0x4, 0x0, 0x7, 0x40100000009e, 0xb0fc, 0x6, 0x0, 0xc, 0x0, 0x8}, 0x0, 0xe, r3, 0x8)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
r5 = mq_open(&(0x7f0000000700)='\x00', 0x40, 0x1, &(0x7f0000000740)={0x8000, 0x7f, 0x9, 0x4})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc04c5349, &(0x7f00000007c0))
sendfile(r5, r6, &(0x7f0000000780)=0x4, 0x7ff)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r7 = dup(r4)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r7}}, 0x58)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x2, 0x3, 0x0, 0x2, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000200), 0x9}, 0x10, 0xc5, 0x7, 0x7, 0x5, 0x1ff, 0x5, 0x0, 0x6ff, 0x0, 0xad00}, 0x0, 0x10, r7, 0x18)

05:15:14 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x80000000, &(0x7f0000002140)})

05:15:14 executing program 7:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r1 = dup(r0)
gettid()
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x10035}, &(0x7f0000000680)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58)
ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000240))
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
io_uring_setup(0x6b25, &(0x7f00000001c0)={0x0, 0xcd2f, 0x4, 0x0, 0x106})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xdaf, 0x0, 0x8001}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x800)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = fork()
ptrace$setopts(0x4206, r4, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r4, 0xc, r3, 0x1)
clone3(&(0x7f0000000080)={0x40020400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/191, &(0x7f0000000640)=[0xffffffffffffffff, r4], 0x2, {r2}}, 0x58)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x5e5000, 0x0)
fcntl$setstatus(r5, 0x4, 0x46400)

05:15:14 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3323.266095] loop1: detected capacity change from 0 to 40
05:15:14 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r2 = dup(r1)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58)

05:15:14 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:15:14 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r3, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r4 = dup(r3)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58)
setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000040)={@rand_addr=0x64010101, @private=0xa010101}, 0xc)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

[ 3323.333482] syz-executor.1: attempt to access beyond end of device
[ 3323.333482] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3323.333509] Buffer I/O error on dev loop1, logical block 10, lost async page write
05:15:14 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})

05:15:14 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r3, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r4 = dup(r3)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58)
setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000040)={@rand_addr=0x64010101, @private=0xa010101}, 0xc)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:15:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:15:15 executing program 2:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=<r2=>0x0, {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x6, 0x2, 0x2, 0x0, 0x400, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xbf, 0x10001}, 0x1400, 0x2, 0xfffffff8, 0x8, 0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x9}, r1, 0x0, r0, 0x1)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x14, 0x1f, 0x7, 0x6, 0x0, 0x43, 0x20, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x238, 0x95f, 0x1, 0x6, 0x40, 0x101, 0x0, 0x0, 0x7f, 0x0, 0x7}, r2, 0x6, r0, 0x9)
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x4, 0x80, 0x7, 0x0, 0x0, 0x6, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3ff, 0x9}, 0x240, 0x4, 0x0, 0x7, 0x40100000009e, 0xb0fc, 0x6, 0x0, 0xc, 0x0, 0x8}, 0x0, 0xe, r3, 0x8)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
r5 = mq_open(&(0x7f0000000700)='\x00', 0x40, 0x1, &(0x7f0000000740)={0x8000, 0x7f, 0x9, 0x4})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc04c5349, &(0x7f00000007c0))
sendfile(r5, r6, &(0x7f0000000780)=0x4, 0x7ff)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r7 = dup(r4)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r7}}, 0x58)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x2, 0x3, 0x0, 0x2, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000200), 0x9}, 0x10, 0xc5, 0x7, 0x7, 0x5, 0x1ff, 0x5, 0x0, 0x6ff, 0x0, 0xad00}, 0x0, 0x10, r7, 0x18)

[ 3323.427926] syz-executor.4: attempt to access beyond end of device
[ 3323.427926] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3323.427977] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3323.459013] loop1: detected capacity change from 0 to 40
[ 3323.628860] syz-executor.1: attempt to access beyond end of device
[ 3323.628860] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3323.628906] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3323.665234] loop4: detected capacity change from 0 to 40
[ 3323.739944] syz-executor.4: attempt to access beyond end of device
[ 3323.739944] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3323.739973] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3341.252468] loop4: detected capacity change from 0 to 40
05:15:32 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:15:32 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
dup(r1)

05:15:32 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc04c5349, &(0x7f00000007c0))
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc04c5349, &(0x7f00000007c0))
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc04c5349, &(0x7f00000007c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ppoll(&(0x7f0000000040)=[{r1, 0x4000}, {r2, 0x8000}, {}, {r3, 0x2552}, {r0, 0x3c10}, {r4, 0x410}, {r0}, {r0}], 0x8, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8000]}, 0x8)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r5, 0x540a, 0x2)

05:15:32 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r3, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r4 = dup(r3)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58)
setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000040)={@rand_addr=0x64010101, @private=0xa010101}, 0xc)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:15:32 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:15:32 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r3, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r4 = dup(r3)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58)
setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000040)={@rand_addr=0x64010101, @private=0xa010101}, 0xc)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:15:32 executing program 2:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=<r2=>0x0, {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x6, 0x2, 0x2, 0x0, 0x400, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xbf, 0x10001}, 0x1400, 0x2, 0xfffffff8, 0x8, 0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x9}, r1, 0x0, r0, 0x1)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x14, 0x1f, 0x7, 0x6, 0x0, 0x43, 0x20, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x238, 0x95f, 0x1, 0x6, 0x40, 0x101, 0x0, 0x0, 0x7f, 0x0, 0x7}, r2, 0x6, r0, 0x9)
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x4, 0x80, 0x7, 0x0, 0x0, 0x6, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3ff, 0x9}, 0x240, 0x4, 0x0, 0x7, 0x40100000009e, 0xb0fc, 0x6, 0x0, 0xc, 0x0, 0x8}, 0x0, 0xe, r3, 0x8)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
r5 = mq_open(&(0x7f0000000700)='\x00', 0x40, 0x1, &(0x7f0000000740)={0x8000, 0x7f, 0x9, 0x4})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc04c5349, &(0x7f00000007c0))
sendfile(r5, r6, &(0x7f0000000780)=0x4, 0x7ff)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r7 = dup(r4)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r7}}, 0x58)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x2, 0x3, 0x0, 0x2, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000200), 0x9}, 0x10, 0xc5, 0x7, 0x7, 0x5, 0x1ff, 0x5, 0x0, 0x6ff, 0x0, 0xad00}, 0x0, 0x10, r7, 0x18)

05:15:32 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})
ioctl$KDSKBLED(r0, 0x4b65, 0xffffffff80000000)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r2 = dup(r1)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000))
fsmount(0xffffffffffffffff, 0x0, 0xf)

[ 3341.256943] loop1: detected capacity change from 0 to 40
05:15:32 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)

05:15:32 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3341.342968] syz-executor.4: attempt to access beyond end of device
[ 3341.342968] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3341.342997] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3341.432676] syz-executor.1: attempt to access beyond end of device
[ 3341.432676] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3341.432723] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3341.462521] loop4: detected capacity change from 0 to 40
05:15:32 executing program 5:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r2 = dup(r1)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58)

05:15:32 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x1)
chmod(&(0x7f0000000100)='./file0\x00', 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r4=>0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0xa, 0x140)
kcmp$KCMP_EPOLL_TFD(r4, 0xffffffffffffffff, 0x7, r5, &(0x7f00000003c0)={r1, r0, 0x9bd8})
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040))
r6 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0)
io_setup(0x3ff, &(0x7f0000000140))
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x6, 0xb3, 0x0, 0x0, 0x100, 0x1002, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0x7f}, 0x804, 0xff, 0x7, 0x4, 0x4, 0x10001, 0x7f, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000000)={0x6, 0x8, 0xfffffff8, 0x800, 0x0, "95c67095733a4bc52c5aa07e4a738a383a5bf9", 0x2, 0x7})
dup2(r6, r1)
ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x20, 0x18, 0x17e, &(0x7f0000002140)})
mount_setattr(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x900, &(0x7f0000000300)={0x100077, 0x9, 0xa0000}, 0xfffffd8f)

05:15:32 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3341.551712] syz-executor.4: attempt to access beyond end of device
[ 3341.551712] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3341.552932] Buffer I/O error on dev loop4, logical block 10, lost async page write
05:15:33 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)

[ 3341.623270] loop1: detected capacity change from 0 to 40
[ 3341.702825] syz-executor.1: attempt to access beyond end of device
[ 3341.702825] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3341.703861] Buffer I/O error on dev loop1, logical block 10, lost async page write
05:15:48 executing program 5:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r2 = dup(r1)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58)

05:15:48 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)

05:15:48 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc04c5349, &(0x7f00000007c0))
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc04c5349, &(0x7f00000007c0))
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc04c5349, &(0x7f00000007c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ppoll(&(0x7f0000000040)=[{r1, 0x4000}, {r2, 0x8000}, {}, {r3, 0x2552}, {r0, 0x3c10}, {r4, 0x410}, {r0}, {r0}], 0x8, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8000]}, 0x8)
syz_open_dev$tty20(0xc, 0x4, 0x1)

05:15:48 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
chmod(&(0x7f0000000100)='./file0\x00', 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r4=>0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0xa, 0x140)
kcmp$KCMP_EPOLL_TFD(r4, 0xffffffffffffffff, 0x7, r5, &(0x7f00000003c0)={r1, r0, 0x9bd8})
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040))
r6 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0)
io_setup(0x3ff, &(0x7f0000000140))
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x6, 0xb3, 0x0, 0x0, 0x100, 0x1002, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0x7f}, 0x804, 0xff, 0x7, 0x4, 0x4, 0x10001, 0x7f, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000000)={0x6, 0x8, 0xfffffff8, 0x800, 0x0, "95c67095733a4bc52c5aa07e4a738a383a5bf9", 0x2, 0x7})
dup2(r6, r1)
ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x20, 0x18, 0x17e, &(0x7f0000002140)})
mount_setattr(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x900, &(0x7f0000000300)={0x100077, 0x9, 0xa0000}, 0xfffffd8f)

05:15:48 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:15:48 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x0)
r2 = syz_open_pts(r0, 0x100)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200018, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@version_u}, {@privport}, {@afid={'afid', 0x3d, 0xbe}}], [{@euid_gt}, {@dont_measure}]}})
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x1f, 0x18, 0x17e, &(0x7f0000002140)})

05:15:48 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:15:48 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r3, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r4 = dup(r3)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58)
setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000040)={@rand_addr=0x64010101, @private=0xa010101}, 0xc)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

[ 3357.247572] loop1: detected capacity change from 0 to 40
[ 3357.261700] loop4: detected capacity change from 0 to 40
05:15:48 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

05:15:48 executing program 5:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r2 = dup(r1)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58)

05:15:48 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
chmod(&(0x7f0000000100)='./file0\x00', 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r4=>0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0xa, 0x140)
kcmp$KCMP_EPOLL_TFD(r4, 0xffffffffffffffff, 0x7, r5, &(0x7f00000003c0)={r1, r0, 0x9bd8})
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040))
r6 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0)
io_setup(0x3ff, &(0x7f0000000140))
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x6, 0xb3, 0x0, 0x0, 0x100, 0x1002, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0x7f}, 0x804, 0xff, 0x7, 0x4, 0x4, 0x10001, 0x7f, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000000)={0x6, 0x8, 0xfffffff8, 0x800, 0x0, "95c67095733a4bc52c5aa07e4a738a383a5bf9", 0x2, 0x7})
dup2(r6, r1)
ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x20, 0x18, 0x17e, &(0x7f0000002140)})
mount_setattr(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x900, &(0x7f0000000300)={0x100077, 0x9, 0xa0000}, 0xfffffd8f)

05:15:48 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)="9f", 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:15:48 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x1, 0x0)

05:15:48 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592", 0x6}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3357.334557] syz-executor.1: attempt to access beyond end of device
[ 3357.334557] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3357.334585] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3357.404079] syz-executor.4: attempt to access beyond end of device
[ 3357.404079] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3357.404124] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3357.469245] loop1: detected capacity change from 0 to 40
05:15:48 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3357.551125] syz-executor.1: attempt to access beyond end of device
[ 3357.551125] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3357.551150] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3357.574187] loop4: detected capacity change from 0 to 40
[ 3357.617050] syz-executor.4: attempt to access beyond end of device
[ 3357.617050] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3357.617076] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3357.639509] loop7: detected capacity change from 0 to 40
[ 3357.729995] syz-executor.7: attempt to access beyond end of device
[ 3357.729995] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3357.730022] Buffer I/O error on dev loop7, logical block 10, lost async page write
05:16:08 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc04c5349, &(0x7f00000007c0))
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc04c5349, &(0x7f00000007c0))
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc04c5349, &(0x7f00000007c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ppoll(&(0x7f0000000040)=[{r1, 0x4000}, {r2, 0x8000}, {}, {r3, 0x2552}, {r0, 0x3c10}, {r4, 0x410}, {r0}, {r0}], 0x8, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8000]}, 0x8)

05:16:08 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)

05:16:08 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000001a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001ac0)=0x14, 0x80800)
recvfrom(r2, &(0x7f00000003c0)=""/77, 0x4d, 0x324, 0x0, 0x0)
r3 = dup(r1)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r3}}, 0x58)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000000)={0x80a8, 0x2df5, 0x3, 0x7, 0x16, "2a12aaadb28ceb59"})
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001300)={0x1, 0x0, 0x801f, 0x18, 0x17e, &(0x7f0000002140)})
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x900)
getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000001900)={@private1, <r5=>0x0}, &(0x7f0000001940)=0x14)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r8=>0x0})
sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0x2}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @rand_addr=0x64010102}}}], 0x20}, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000001a40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xcc}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040840}, 0x20020800)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000001340)={'syztnl1\x00', &(0x7f0000001280)={'sit0\x00', <r9=>0x0, 0x2f, 0x1, 0xc0, 0x2, 0x1b, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x41}, 0x8000, 0x8, 0x7, 0x8}})
[ 3377.215446] loop1: detected capacity change from 0 to 40
[ 3377.220393] loop5: detected capacity change from 0 to 40
[ 3377.225480] loop4: detected capacity change from 0 to 40
sendmmsg$inet6(r4, &(0x7f0000001780)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0xfffffffa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x29d}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000000c0)="513d05891f4079aee85b48d9a59241", 0xf}, {&(0x7f0000000500)="2bbe7ca67e5e2716b76cdba695d618fbccd78973522f594e8d7760bcb5c7897e566b9204e4c843670c8fd992378c9d46237028980748a650a79b3d20abe2339706f7761a892fcbd24c46de76", 0x4c}, {&(0x7f0000000280)="bdfd9678a621912fa98c4a14d166185cdc0466e235eb33f001ea48f7f05d53d00ae56473a7c5d8b185598e43", 0x2c}, {&(0x7f0000000580)="c832abb0fc7d77e8a113c209085c999270fceeed001b56655a570c91d51791264913cf25b969f8732b29ff10a84dca0a58d9d16ea41837b133e87c041a536a56f5eb8cbef9415dc81ee962323a27df49b10e49cb3f73353b2c10212e090d20505471de20f40a627f539acbad6369da399e6b06472eb65f8714949089189bdca4cc703444236d0b819f223e44278c6e4aee46b774", 0x94}, {&(0x7f0000000680)="47ddd4fbc1fe51402fd719eef7ec0e34505d5ba03972bc70bf8d1c263faa5b6ec24b50a14573f4a6b0354a408b5d38bc4e14c7b612d476a8fedd77e6350ee7355f3e0b1a54af97ec8977ac4fcf9926612f2952b336703f4c5a3ae8022659130ee6cb2212ca679d355e8e88a56a606b7af5920987cac8c24457a2615dc3557306d91dc073914662898c0c7e", 0x8b}], 0x5, &(0x7f00000007c0)=[@tclass={{0x14, 0x29, 0x43, 0x80000001}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @hopopts={{0x58, 0x29, 0x36, {0x32, 0x7, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0x1, 0x9, [0xffff, 0x1, 0x7, 0x200, 0x8, 0xa]}}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x2f, 0x2, '\x00', [@pad1, @ra, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}]}}}], 0xb8}}, {{&(0x7f0000000440)={0xa, 0x4e24, 0xff, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000880)="bf6174a4dce89dd9ed8294b6618a4ee325dcb30016357f5aab69165991a195389455f607b0fc81724c7b74dcfadd68e8927c9f920604f8ee3bd45fccd7e7a4a95ca15ca415b2874b093562db8d455c76f677f5fb446e04844484d942eb56ba7d", 0x60}, {&(0x7f0000000900)="f22606d5d99054942a3edc514dd8b2ec5d9e29", 0x13}, {&(0x7f0000000940)="f9ce0267b4204539a5c4eb73a578eea959d3dddfa2d2ac6a065208902db6490a1570a9f19c6b4475d3696de0ebb6b32add282e7e5e901b878d463c6b562e75ebf54ca3d43071843a30ffb560be32bd697afeaf1d7c1e080fd85526942df4c44f3c55ae19ed1f9779b31e988d285dc76e7541e09d7618b80652f54d8f2a3fe1631bf395882a61c692e1cc8a1e813a75e41855cf698d19f0c2f19c9b84269aab22b9c207eb9cb65f0454e5c120678af138cc", 0xb1}, {&(0x7f0000000a00)="11f5300341b860e1e99aec7994aa2a3b81f2fc791b953a6eabd069227ff8ccd75986c7e8a1c8e91360a0ce027e332367d4233171b776463c73451e733c70e7773bb3161df13cd063e693f2ffcffff0980128a1ee1d25e0034f5f1de43d5606bfb6c8e8fb4b793a947282f0d5df67ba133fe1ddc6beb5eaf419a56399d9af970a21c6bef7ac44a8b93b259fb550373b3d652ab32d52f4e372c9e4b71b5655b71dc9c27b0c05f8c2fab761941b2dd072b6f79ade7ca11eb8b0203a73", 0xbb}, {&(0x7f0000000ac0)="60ebb4d7a8ec152df0f2644d", 0xc}, {&(0x7f0000000b00)="086c80b7135d075260f7abfa30d0ba5f2a4b55880b0382563df6f4a940047715bee94b5edae83d8dec371f4b87e800b67c4acc2b09d8a78550e7d5d406db78b070600e4a18387c0307d846e97b483bf6e422581a97cfaeafcec07ff8022ac4b08bbdc7deb94629", 0x67}], 0x6, &(0x7f0000000c00)=[@hoplimit={{0x14, 0x29, 0x34, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x987b}}, @rthdrdstopts={{0x158, 0x29, 0x37, {0x33, 0x27, '\x00', [@pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0x3f, 0x1, [0x8000]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0xa6, 0xfa, "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"}, @ra={0x5, 0x2, 0x3c}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x21, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}], 0x1a8}}, {{&(0x7f0000000dc0)={0xa, 0x4e24, 0xfffffff9, @mcast1, 0x6}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000e00)="3a13774130a1208bfab2e26c6353d407f0187334260b489a0b85deea627ce955a91eeff66569c29ab99dc78aca041d38c40720c315f0f9bffe3c490149cdc9e971d3ecf4c400eddf31019432918b721bbe20c93e42194b2d45065515bb82d64fe87bd3ff48e38bdf4a63a19e88cc2932b550490f94ae98b9b610415d07a9dd592612c6ea850b71ea69fc913356853e8e7ae1f558be6480ee712d9681bee5fc0003cb5225c90b0924fc181552555c13c45e6a4b3a3cbd42eddcbcacfbe225b72d47ba9b2cb7ba7b91fcbbc451af0dc8593bf602138eab13a5734816dae02a11a5a8d8bf41bb54a50cf613b4291c3b563eee09d9", 0xf3}, {&(0x7f0000000f00)="4d46597fb13b8da09abb5be3a04bea47d167b2a7e7a923f18831ed071461fc4f2fd0b8e0af20075598de35de7cd35aaf633929f8a19b7688b4a44baa8ea4cebb257c9411976574b17639d3b2ccbf419efb982aadcc5eb63d17445f89629ff7291a9c723e4603c94174ccd82a5fd83a62ea3d99ad78fc20a971e1fefe0376032cb3348e30ca0ce211f92530b3a7425b10041bc792b959d6b9de73e1f0239986705900b6b7d7004f1b8c428df6a8029ef2", 0xb0}, {&(0x7f0000000fc0)="2654fd2b3d5bc1dd6935b90f8a9ebda4612c252a7ab1785a96570dbdc88360caecee487033df493b1ee29e4c422ccc28ff418f30123c54c688b1e33e3f264d92b40284c12344919af2ba8ebef31a9dd5c17f0f86654ef45d1f6eef3f08a4341e4d865e434986450b6f62ddc3756b4642880fb97c970a261969c612c4d202f8ee909615812240a9c0bd54a71c", 0x8c}, {&(0x7f0000001080)="3c19868c5b7fe211c615cd30cc5d87287202aeaf769a0ad0cca954a87cb163d79b7aef4e723b315158d6ca934117b5154f55aba9579d4865e44b5f85e383fcf5c27897db7909ff1bffeef469e0c6c76cd256ba9410004abd2d5176bd3255cf0257109303269fa34f47cde5e89a734f8a014bea688cc2364a625734eb1bea202c93e23b1080028d443db0697d9d9b6ae9204500b5f254ac67c8a3a5ebbc558139710c4af5", 0xa4}, {&(0x7f0000002540)="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", 0x1000}, {&(0x7f0000001140)="e2c0c74d034437dcce01dc6229767e17640da3ce0721e1daaee8756f5503f462101ade0511c0cfd2e2b85374f1f9f4b9c697abca25d894353b9e500da20dda6f9b07cb90e220b031968605e4c048126a7b7d6fc07127003f50703b97ea8befc4ecf5e38878dfd91b08b7724b9fe870cda67ef87b584aa2b689c60a745b026b1e13870443b0b746b417817c6497368fd265724c8fdd5bfa00bbb29853146a59ba84fb08e70fbdc7083886b29161b0be14fa131792f28cc79b4a9e953a75", 0xbd}, {&(0x7f0000004280)="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", 0x1000}, {&(0x7f0000005280)="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", 0x1000}], 0x8, &(0x7f0000001380)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r9}}}, @hopopts={{0x90, 0x29, 0x36, {0x33, 0xe, '\x00', [@pad1, @pad1, @generic={0x1, 0x50, "21f23285743f4d420fb329337efa2199c8c41fd8ddf36d12ee42cacf10ace48129f745ffe8d7d88438074e46fa537d75a01e76099e8e9e7fed89db4b87da9dc5d3ceee0d1a777a258361c673c84958e8"}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x14}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0xb8}}, {{&(0x7f0000001440)={0xa, 0x4e24, 0x9, @loopback, 0x7fff}, 0x1c, &(0x7f00000014c0)=[{&(0x7f0000001480)="1ca8d9338682cce5444f599ea09829a5bea6239aad7e35bfe0b5d4b92a8003b45a82133a6599f021ed9eb338b3f52454e58304349cdf33a1", 0x38}], 0x1, &(0x7f0000001500)=[@hoplimit={{0x14, 0x29, 0x34, 0x335}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3b, 0x4, 0x1, 0x8, 0x0, [@private0, @mcast2]}}}, @tclass={{0x14, 0x29, 0x43, 0x80000001}}], 0x68}}, {{&(0x7f0000001580)={0xa, 0x4e22, 0xffffffff, @loopback, 0x2}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000015c0)="eab541112f181a4dec629225b2d22c204b5482f6790b71aa0a9eceaf27b3faa6b5c378e79015e79ffef1a31dfb7e97a7a883b6c7667891b1a34f66d391459742", 0x40}, {&(0x7f0000001600)="53c9ea3bcce331c52b5d44cfd0d62e6ae79642a7babb97c4e10f3728d63b3d3db3e9579993f6feec2a6b4e20585b617ef44ca937d2923632940770b0b36b58ea4c50c48559c86d93445c2895eb38cf0bc5ad57b2b1740e113950ffbe32", 0x5d}, {&(0x7f0000001680)="6f7375461f2c5316fdc94c6f1ed374c43df8791e614da9b167c33100343a04e3cc34ed34de47b4c0b52a0e10719930a870b6d317b99eee41aea4670012be0bee4fe61c72ddebd0941000bd20920de136d0fa29487040954c15d41435c92e0bd441d21b5a1ee259ecb8566ccf3c785748d4bf9333e9bde1b2072f305acd3b691a6697dcb27aeb1613ef3af67d103673db243c83e33d786db149666e028370e2b37b6aa29ba13c1c53034e3dca6beccb80a42778e462681818590aeafd", 0xbc}], 0x3, &(0x7f0000006280)=[@dstopts_2292={{0x58, 0x29, 0x4, {0x3c, 0x7, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x2, 0x6, [0x9, 0x6000000000, 0x10001, 0x0, 0x7ff, 0x0]}}]}}}, @dstopts_2292={{0x1130, 0x29, 0x4, {0x3a, 0x223, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x1f, 0xfffd, [0x1, 0x8, 0x4]}}, @hao={0xc9, 0x10, @mcast2}, @generic={0x9c, 0x1000, "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"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x9c, 0xbf, "f11e219f90b9a5907166bc8341dec57672bf4cb90d3d3c3d1ccae1cf7309605be47572e24bed27992d3a588bcd9f2c6e8092292cff469783428f13280c931952b58b112e812fa4da9a7586e7e4018a31907832ea01613412dd70f76d8fb6aa2bdd48004cc251f4f1ba22047ffd23dc7b1ebfa753f1c8b6a358f5a2d5a4181c39c22112e13f32bffa5e18910737b9baa557e62c246562e3d16ef1828a13cede4c7ab44766d351f7d6e21169f8db936a04c12f5a5cc928d839140a67f7ff1312"}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1c4}, @hao={0xc9, 0x10, @mcast1}]}}}], 0x1188}}], 0x5, 0x20000800)

05:16:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592", 0x6}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:16:08 executing program 2:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r2 = dup(r1)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58)

05:16:08 executing program 7:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400)=<r0=>0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = fork()
ptrace$setopts(0x4206, r2, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r2, 0xc, r1, 0x1)
perf_event_open(&(0x7f0000000000)={0x696d2f8907d0908b, 0x80, 0x1, 0x7e, 0x1, 0xc0, 0x0, 0x7, 0x800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x3f, 0x7fff}, 0x20, 0x3ff, 0x7, 0x1, 0x80000001, 0x51b, 0xadd6, 0x0, 0x3, 0x0, 0x6}, r2, 0x1, 0xffffffffffffffff, 0xa)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000700)={0x0, 0x8})
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = fork()
ptrace$setopts(0x4206, r4, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r4, 0xc, r3, 0x1)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0xef, 0x1, 0x3f, 0x0, 0x65d, 0x4b804, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x5, 0x7}, 0x121, 0x2, 0x3, 0x0, 0x3, 0x336, 0x6, 0x0, 0x3, 0x0, 0x7}, r4, 0x8, 0xffffffffffffffff, 0x9)

05:16:08 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:16:08 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)="9f", 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:16:08 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x2400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=<r0=>0x0, {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r1 = fork()
ptrace$setopts(0x4206, r1, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r1, 0xc, 0xffffffffffffffff, 0x1)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = fork()
ptrace$setopts(0x4206, r3, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r3, 0xc, r2, 0x1)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r5 = dup(r4)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58)
clone3(&(0x7f0000000700)={0xa000000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180), {0x1b}, &(0x7f00000001c0)=""/134, 0x86, &(0x7f0000000300)=""/126, &(0x7f0000000380)=[r0, r1, r3], 0x3, {r5}}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:16:08 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)

[ 3377.363733] syz-executor.1: attempt to access beyond end of device
[ 3377.363733] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3377.365805] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3377.374950] syz-executor.4: attempt to access beyond end of device
[ 3377.374950] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3377.376870] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3377.403732] syz-executor.5: attempt to access beyond end of device
[ 3377.403732] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3377.405484] Buffer I/O error on dev loop5, logical block 10, lost async page write
05:16:08 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)="9f", 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:16:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592", 0x6}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:16:08 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x2400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=<r0=>0x0, {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r1 = fork()
ptrace$setopts(0x4206, r1, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r1, 0xc, 0xffffffffffffffff, 0x1)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = fork()
ptrace$setopts(0x4206, r3, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r3, 0xc, r2, 0x1)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r5 = dup(r4)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58)
clone3(&(0x7f0000000700)={0xa000000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180), {0x1b}, &(0x7f00000001c0)=""/134, 0x86, &(0x7f0000000300)=""/126, &(0x7f0000000380)=[r0, r1, r3], 0x3, {r5}}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:16:08 executing program 2:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r2 = dup(r1)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58)

[ 3377.592110] loop4: detected capacity change from 0 to 40
[ 3377.608399] loop1: detected capacity change from 0 to 40
05:16:09 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 3377.742020] syz-executor.4: attempt to access beyond end of device
[ 3377.742020] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3377.743744] syz-executor.1: attempt to access beyond end of device
[ 3377.743744] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3377.743789] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3377.747016] Buffer I/O error on dev loop4, logical block 10, lost async page write
05:16:09 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)="9f", 0x1}, {0x0}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:16:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2", 0x9}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3377.978731] loop4: detected capacity change from 0 to 40
[ 3377.984959] loop1: detected capacity change from 0 to 40
[ 3378.055434] syz-executor.1: attempt to access beyond end of device
[ 3378.055434] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3378.057414] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3378.090726] syz-executor.4: attempt to access beyond end of device
[ 3378.090726] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3378.092530] Buffer I/O error on dev loop4, logical block 10, lost async page write
05:16:23 executing program 2:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r2 = dup(r1)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58)

05:16:23 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x2400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=<r0=>0x0, {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r1 = fork()
ptrace$setopts(0x4206, r1, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r1, 0xc, 0xffffffffffffffff, 0x1)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = fork()
ptrace$setopts(0x4206, r3, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r3, 0xc, r2, 0x1)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r5 = dup(r4)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58)
clone3(&(0x7f0000000700)={0xa000000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180), {0x1b}, &(0x7f00000001c0)=""/134, 0x86, &(0x7f0000000300)=""/126, &(0x7f0000000380)=[r0, r1, r3], 0x3, {r5}}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:16:23 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x2400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=<r0=>0x0, {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r1 = fork()
ptrace$setopts(0x4206, r1, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r1, 0xc, 0xffffffffffffffff, 0x1)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = fork()
ptrace$setopts(0x4206, r3, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r3, 0xc, r2, 0x1)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r5 = dup(r4)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58)
clone3(&(0x7f0000000700)={0xa000000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180), {0x1b}, &(0x7f00000001c0)=""/134, 0x86, &(0x7f0000000300)=""/126, &(0x7f0000000380)=[r0, r1, r3], 0x3, {r5}}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

05:16:23 executing program 6:
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)

05:16:23 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc04c5349, &(0x7f00000007c0))
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc04c5349, &(0x7f00000007c0))
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc04c5349, &(0x7f00000007c0))
ppoll(&(0x7f0000000040)=[{r1, 0x4000}, {r2, 0x8000}, {}, {r3, 0x2552}, {r0, 0x3c10}, {0xffffffffffffffff, 0x410}, {r0}, {r0}], 0x8, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8000]}, 0x8)

05:16:23 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592", 0x6}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:16:23 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)="9f", 0x1}, {0x0}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:16:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2", 0x9}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3392.363515] loop4: detected capacity change from 0 to 40
[ 3392.431390] loop7: detected capacity change from 0 to 40
[ 3392.435239] loop1: detected capacity change from 0 to 40
05:16:23 executing program 6:
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3392.534894] syz-executor.4: attempt to access beyond end of device
[ 3392.534894] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3392.536804] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3392.537648] syz-executor.1: attempt to access beyond end of device
[ 3392.537648] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3392.538897] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3392.551931] syz-executor.7: attempt to access beyond end of device
[ 3392.551931] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3392.553082] Buffer I/O error on dev loop7, logical block 10, lost async page write
05:16:24 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)="9f", 0x1}, {0x0}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:16:24 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)="9f", 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:16:24 executing program 6:
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

05:16:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200100, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101861, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000205601000000", @ANYRES32, @ANYBLOB="00000000000042d8c42666696c653000"])
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0xdfdc, 0x1, 0xffffffff, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0x42, 0x9, 0x69, 0x0, 0x800, 0x10800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4002, 0x401, 0x401, 0x4, 0x92, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2", 0x9}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

05:16:24 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000680)={0x2400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=<r0=>0x0, {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
r1 = fork()
ptrace$setopts(0x4206, r1, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r1, 0xc, 0xffffffffffffffff, 0x1)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = fork()
ptrace$setopts(0x4206, r3, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r3, 0xc, r2, 0x1)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
r5 = dup(r4)
clone3(&(0x7f0000000480)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000340)=""/11, &(0x7f0000000380)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58)
clone3(&(0x7f0000000700)={0xa000000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180), {0x1b}, &(0x7f00000001c0)=""/134, 0x86, &(0x7f0000000300)=""/126, &(0x7f0000000380)=[r0, r1, r3], 0x3, {r5}}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

[ 3392.737861] loop4: detected capacity change from 0 to 40
[ 3392.740519] loop7: detected capacity change from 0 to 40
[ 3392.744524] loop1: detected capacity change from 0 to 40
05:16:24 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x94022, 0x10)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = fork()
ptrace$setopts(0x4206, r2, 0x0, 0x44)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x40, 0x8, 0x4, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x883a, 0x4, 0x10000, 0x9, 0x4, 0x54e7, 0x8, 0x0, 0x3, 0x0, 0x31cd938c}, r2, 0xc, r1, 0x1)
syz_open_procfs(r2, &(0x7f0000000040)='oom_score\x00')
r3 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone3(&(0x7f0000000680)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x35}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/219, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

[ 3392.800488] syz-executor.4: attempt to access beyond end of device
[ 3392.800488] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3392.801483] Buffer I/O error on dev loop4, logical block 10, lost async page write
05:16:24 executing program 6:
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3392.879875] syz-executor.1: attempt to access beyond end of device
[ 3392.879875] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3392.881834] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3392.906699] syz-executor.7: attempt to access beyond end of device
[ 3392.906699] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3392.908596] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 3393.029143] ------------[ cut here ]------------
[ 3393.029256] ------------[ cut here ]------------
[ 3393.029354] WARNING: CPU: 1 PID: 18043 at fs/kernfs/dir.c:504 kernfs_get.part.0+0x69/0x80
[ 3393.029384] Modules linked in:
[ 3393.029392] CPU: 1 PID: 18043 Comm: kworker/1:0 Not tainted 5.19.0-rc4-next-20220630 #1
[ 3393.029405] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 3393.029415] Workqueue: events kernfs_notify_workfn
[ 3393.029431] RIP: 0010:kernfs_get.part.0+0x69/0x80
[ 3393.029445] Code: 31 ff 89 ee e8 c8 0b a7 ff 85 ed 74 18 e8 ef 0e a7 ff be 04 00 00 00 48 89 df e8 c2 c3 d9 ff f0 ff 03 5b 5d c3 e8 d7 0e a7 ff <0f> 0b eb df 48 89 df e8 6b c0 d9 ff eb c6 66 0f 1f 84 00 00 00 00
[ 3393.029457] RSP: 0018:ffff88806cf09c80 EFLAGS: 00010046
[ 3393.029467] RAX: 0000000000000000 RBX: ffff88801d2e90e8 RCX: 0000000000000100
[ 3393.029475] RDX: ffff888046a15040 RSI: ffffffff819d50a9 RDI: 0000000000000005
[ 3393.029484] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 3393.029491] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001
[ 3393.029498] R13: 1ffffffff0a01e40 R14: ffff88801d2e90e8 R15: ffff888044b5d130
[ 3393.029509] FS:  0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 3393.029520] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3393.029528] CR2: 0000001b2d927000 CR3: 000000001dc64000 CR4: 0000000000350ee0
[ 3393.029536] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 3393.029543] DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400
[ 3393.029551] Call Trace:
[ 3393.029554]  <IRQ>
[ 3393.029561]  kernfs_get+0x1b/0x30
[ 3393.029574]  kernfs_notify+0x180/0x350
[ 3393.029589]  cgroup_file_notify+0xf5/0x1a0
[ 3393.029612]  ? cgroup_file_notify+0x1a0/0x1a0
[ 3393.029629]  call_timer_fn+0x17d/0x5f0
[ 3393.029649]  ? msleep_interruptible+0x180/0x180
[ 3393.029674]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 3393.029694]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 3393.029715]  ? cgroup_file_notify+0x1a0/0x1a0
[ 3393.029733]  __run_timers.part.0+0x65e/0xa50
[ 3393.029760]  ? call_timer_fn+0x5f0/0x5f0
[ 3393.029776]  ? __do_softirq+0x17d/0x8c7
[ 3393.029792]  ? lock_is_held_type+0xd7/0x130
[ 3393.029818]  run_timer_softirq+0xae/0x1a0
[ 3393.029837]  __do_softirq+0x270/0x8c7
[ 3393.029858]  __irq_exit_rcu+0x113/0x170
[ 3393.029875]  irq_exit_rcu+0x5/0x20
[ 3393.029889]  sysvec_apic_timer_interrupt+0x8e/0xc0
[ 3393.029902]  </IRQ>
[ 3393.029905]  <TASK>
[ 3393.029910]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 3393.029923] RIP: 0010:__down_trylock_console_sem+0x43/0xd0
[ 3393.029940] Code: 89 e6 e8 80 63 19 00 4d 85 e4 75 44 e8 86 66 19 00 e8 f1 6f 00 00 48 c7 c7 80 82 1f 85 e8 c5 91 fc ff 41 89 c4 e8 ed 6f 00 00 <e8> 68 66 19 00 31 ff 44 89 e6 e8 2e 63 19 00 45 85 e4 74 3d e8 54
[ 3393.029951] RSP: 0018:ffff88800d51f9b8 EFLAGS: 00000202
[ 3393.029961] RAX: 000000000002a03d RBX: ffffffff812b68e0 RCX: ffffffff8128648f
[ 3393.029969] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 3393.029976] RBP: ffff88800d51fa08 R08: 0000000000000001 R09: ffffffff86a5d81f
[ 3393.029984] R10: fffffbfff0d4bb03 R11: 0000000000000001 R12: 0000000000000000
[ 3393.029991] R13: 0000000000000000 R14: ffffffff846576c0 R15: ffff88800d51fa58
[ 3393.030003]  ? vprintk+0x80/0x90
[ 3393.030021]  ? mark_lock.part.0+0xef/0x2f60
[ 3393.030043]  ? __down_trylock_console_sem+0x91/0xd0
[ 3393.030059]  vprintk_emit+0x167/0x550
[ 3393.030079]  vprintk+0x80/0x90
[ 3393.030095]  _printk+0xba/0xed
[ 3393.030111]  ? record_print_text.cold+0x16/0x16
[ 3393.030134]  ? __warn_printk+0x8f/0xf3
[ 3393.030159]  __warn_printk+0x9b/0xf3
[ 3393.030177]  ? dup_mmap.cold+0x24/0x24
[ 3393.030195]  ? lock_release+0x3b2/0x750
[ 3393.030210]  ? kernfs_notify_workfn+0x40f/0x560
[ 3393.030225]  ? lock_downgrade+0x6d0/0x6d0
[ 3393.030240]  ? do_raw_spin_lock+0x121/0x260
[ 3393.030263]  kernfs_put.part.0+0x433/0x540
[ 3393.030283]  kernfs_put+0x42/0x50
[ 3393.030296]  kernfs_notify_workfn+0x417/0x560
[ 3393.030316]  ? kernfs_vma_page_mkwrite+0x230/0x230
[ 3393.030333]  ? lock_is_held_type+0xd7/0x130
[ 3393.030350]  process_one_work+0xa17/0x1690
[ 3393.030376]  ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 3393.030397]  ? rwlock_bug.part.0+0x90/0x90
[ 3393.030414]  ? ct_nmi_exit+0x119/0x1c0
[ 3393.030432]  worker_thread+0x637/0x1250
[ 3393.030456]  ? __kthread_parkme+0x15a/0x220
[ 3393.030471]  ? process_one_work+0x1690/0x1690
[ 3393.030490]  kthread+0x2f2/0x3b0
[ 3393.030502]  ? kthread_complete_and_exit+0x40/0x40
[ 3393.030520]  ret_from_fork+0x22/0x30
[ 3393.030548]  </TASK>
[ 3393.030552] irq event stamp: 172099
[ 3393.030556] hardirqs last  enabled at (172098): [<ffffffff841afa4f>] _raw_spin_unlock_irq+0x1f/0x40
[ 3393.030584] hardirqs last disabled at (172099): [<ffffffff841af87e>] _raw_spin_lock_irqsave+0x4e/0x50
[ 3393.030604] softirqs last  enabled at (171122): [<ffffffff811679e3>] __irq_exit_rcu+0x113/0x170
[ 3393.030622] softirqs last disabled at (172095): [<ffffffff811679e3>] __irq_exit_rcu+0x113/0x170
[ 3393.030639] ---[ end trace 0000000000000000 ]---
[ 3393.062705] kernfs_put: syz2/pids.events: released with incorrect active_ref 0
[ 3393.063251] WARNING: CPU: 1 PID: 18043 at fs/kernfs/dir.c:531 kernfs_put.part.0+0x433/0x540
[ 3393.063808] Modules linked in:
[ 3393.064033] CPU: 1 PID: 18043 Comm: kworker/1:0 Tainted: G        W         5.19.0-rc4-next-20220630 #1
[ 3393.064663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 3393.065422] Workqueue: events kernfs_notify_workfn
[ 3393.065761] RIP: 0010:kernfs_put.part.0+0x433/0x540
[ 3393.066103] Code: 03 80 3c 18 00 0f 85 ea 00 00 00 4d 8b 7d 38 e8 73 0a a7 ff 48 8b 14 24 44 89 f1 4c 89 fe 48 c7 c7 20 58 72 84 e8 7e 40 6c 02 <0f> 0b e9 b9 fc ff ff 48 89 ef e8 fe bb d9 ff e9 c1 fd ff ff e8 f4
[ 3393.067341] RSP: 0018:ffff88800d51fbd8 EFLAGS: 00010286
[ 3393.067702] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000
[ 3393.068197] RDX: ffff888046a15040 RSI: ffffffff812b68e8 RDI: ffffed1001aa3f6d
[ 3393.068671] RBP: ffff88801d2e9120 R08: 0000000000000005 R09: 0000000000000000
[ 3393.069141] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801d2e90e8
[ 3393.069644] R13: ffff888042c18cb0 R14: 0000000000000000 R15: ffff888013e93d20
[ 3393.070115] FS:  0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 3393.070680] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3393.071071] CR2: 0000001b2d927000 CR3: 000000001dc64000 CR4: 0000000000350ee0
[ 3393.071567] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 3393.072038] DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400
[ 3393.072532] Call Trace:
[ 3393.072716]  <TASK>
[ 3393.072885]  kernfs_put+0x42/0x50
[ 3393.073133]  kernfs_notify_workfn+0x417/0x560
[ 3393.073472]  ? kernfs_vma_page_mkwrite+0x230/0x230
[ 3393.073814]  ? lock_is_held_type+0xd7/0x130
[ 3393.074113]  process_one_work+0xa17/0x1690
[ 3393.074436]  ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 3393.074771]  ? rwlock_bug.part.0+0x90/0x90
[ 3393.075067]  ? ct_nmi_exit+0x119/0x1c0
[ 3393.075362]  worker_thread+0x637/0x1250
[ 3393.075650]  ? __kthread_parkme+0x15a/0x220
[ 3393.075948]  ? process_one_work+0x1690/0x1690
[ 3393.076286]  kthread+0x2f2/0x3b0
[ 3393.076524]  ? kthread_complete_and_exit+0x40/0x40
[ 3393.076872]  ret_from_fork+0x22/0x30
[ 3393.077148]  </TASK>
[ 3393.077336] irq event stamp: 172933
[ 3393.077585] hardirqs last  enabled at (172943): [<ffffffff812af848>] __up_console_sem+0x78/0x80
[ 3393.078183] hardirqs last disabled at (172954): [<ffffffff812af82d>] __up_console_sem+0x5d/0x80
[ 3393.078772] softirqs last  enabled at (172112): [<ffffffff811679e3>] __irq_exit_rcu+0x113/0x170
[ 3393.079373] softirqs last disabled at (172095): [<ffffffff811679e3>] __irq_exit_rcu+0x113/0x170
[ 3393.079951] ---[ end trace 0000000000000000 ]---
[ 3393.080428] ==================================================================
[ 3393.080900] BUG: KASAN: use-after-free in llist_del_first+0x89/0xa0
[ 3393.081324] Read of size 8 at addr ffff88801d2e9168 by task kworker/1:0/18043
[ 3393.081792] 
[ 3393.081908] CPU: 1 PID: 18043 Comm: kworker/1:0 Tainted: G        W         5.19.0-rc4-next-20220630 #1
[ 3393.082514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 3393.083254] Workqueue: events kernfs_notify_workfn
[ 3393.083586] Call Trace:
[ 3393.083761]  <TASK>
[ 3393.083912]  dump_stack_lvl+0x8b/0xb3
[ 3393.084175]  print_report.cold+0x5e/0x5e1
[ 3393.084460]  ? llist_del_first+0x89/0xa0
[ 3393.084734]  kasan_report+0xbe/0x1c0
[ 3393.084993]  ? llist_del_first+0x89/0xa0
[ 3393.085272]  llist_del_first+0x89/0xa0
[ 3393.085537]  kernfs_notify_workfn+0x78/0x560
[ 3393.085843]  ? kernfs_vma_page_mkwrite+0x230/0x230
[ 3393.086169]  ? lock_is_held_type+0xd7/0x130
[ 3393.086461]  process_one_work+0xa17/0x1690
[ 3393.086762]  ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 3393.087076]  ? rwlock_bug.part.0+0x90/0x90
[ 3393.087362]  ? ct_nmi_exit+0x119/0x1c0
[ 3393.087625]  worker_thread+0x637/0x1250
[ 3393.087904]  ? __kthread_parkme+0x15a/0x220
[ 3393.088194]  ? process_one_work+0x1690/0x1690
[ 3393.088501]  kthread+0x2f2/0x3b0
[ 3393.088731]  ? kthread_complete_and_exit+0x40/0x40
[ 3393.089062]  ret_from_fork+0x22/0x30
[ 3393.089317]  </TASK>
[ 3393.089475] 
[ 3393.089590] Allocated by task 851:
[ 3393.089827]  kasan_save_stack+0x1e/0x40
[ 3393.090098]  __kasan_slab_alloc+0x66/0x80
[ 3393.090374]  kmem_cache_alloc+0x1b1/0x490
[ 3393.090659]  __kernfs_new_node+0xd4/0x8b0
[ 3393.090933]  kernfs_new_node+0x93/0x120
[ 3393.091201]  __kernfs_create_file+0x51/0x350
[ 3393.091499]  cgroup_addrm_files+0x3e2/0x9d0
[ 3393.091786]  css_populate_dir+0x19b/0x450
[ 3393.092065]  cgroup_apply_control_enable+0x3ae/0xa40
[ 3393.092408]  cgroup_mkdir+0x824/0x11f0
[ 3393.092671]  kernfs_iop_mkdir+0x149/0x1d0
[ 3393.092948]  vfs_mkdir+0x417/0x6a0
[ 3393.093195]  do_mkdirat+0x17b/0x2e0
[ 3393.093444]  __x64_sys_mkdir+0xf2/0x140
[ 3393.093717]  do_syscall_64+0x3b/0x90
[ 3393.093974]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 3393.094316] 
[ 3393.094431] Freed by task 18043:
[ 3393.094661]  kasan_save_stack+0x1e/0x40
[ 3393.094929]  kasan_set_track+0x21/0x30
[ 3393.095192]  kasan_set_free_info+0x20/0x30
[ 3393.095474]  ____kasan_slab_free+0x14b/0x1a0
[ 3393.095772]  kmem_cache_free+0xfb/0x600
[ 3393.096035]  kernfs_put.part.0+0x2c7/0x540
[ 3393.096318]  kernfs_put+0x42/0x50
[ 3393.096553]  kernfs_notify_workfn+0x417/0x560
[ 3393.096866]  process_one_work+0xa17/0x1690
[ 3393.097149]  worker_thread+0x637/0x1250
[ 3393.097419]  kthread+0x2f2/0x3b0
[ 3393.097648]  ret_from_fork+0x22/0x30
[ 3393.097901] 
[ 3393.098017] The buggy address belongs to the object at ffff88801d2e90e8
[ 3393.098017]  which belongs to the cache kernfs_node_cache of size 168
[ 3393.098897] The buggy address is located 128 bytes inside of
[ 3393.098897]  168-byte region [ffff88801d2e90e8, ffff88801d2e9190)
[ 3393.099683] 
[ 3393.099798] The buggy address belongs to the physical page:
[ 3393.100158] page:00000000b33a45bc refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1d2e9
[ 3393.100761] flags: 0x100000000000200(slab|node=0|zone=1)
[ 3393.101124] raw: 0100000000000200 0000000000000000 dead000000000122 ffff8880080718c0
[ 3393.101631] raw: 0000000000000000 0000000000110011 00000001ffffffff 0000000000000000
[ 3393.102131] page dumped because: kasan: bad access detected
[ 3393.102497] 
[ 3393.102622] Memory state around the buggy address:
[ 3393.102944]  ffff88801d2e9000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 3393.103417]  ffff88801d2e9080: 00 00 00 00 00 fc fc fc fc fc fc fc fc fa fb fb
[ 3393.103889] >ffff88801d2e9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 3393.104361]                                                           ^
[ 3393.104789]  ffff88801d2e9180: fb fb fc fc fc fc fc fc fc fc 00 00 00 00 00 00
[ 3393.105266]  ffff88801d2e9200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc
[ 3393.105739] ==================================================================
[ 3393.106249] Disabling lock debugging due to kernel taint

VM DIAGNOSIS:
05:16:24  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=ffff88800785b4d8 RCX=0000000000000001 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff88800785b548 RBP=ffff88800b9c0000 RSP=ffff88801962f850
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=1ffff110032c5f0d R13=dffffc0000000000 R14=ffff888008072000 R15=ffff88800b9c0088
RIP=ffffffff81290bfa RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f8db3c788c0 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555557132c98 CR3=000000000ede8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff4ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 000000000000002f 002f2e2e2f002e2e
YMM01=0000000000000000 0000000000000000 0000000000000000 696c61766e49002f
YMM02=0000000000000000 0000000000000000 ffffffffffffff0f 0e0d0c0b0a090807
YMM03=0000000000000000 0000000000000000 696e656420737365 636341002f737973
YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
YMM05=0000000000000000 0000000000000000 0000563670532840 00005636704e8370
YMM06=0000000000000000 0000000000000000 00005636704e8390 0000000200000003
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 2f63697361622f63 72732f2e2e000d0a
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff8240fcbc RDI=ffffffff873e36e0 RBP=ffffffff873e36a0 RSP=ffff88800d51f5d8
R8 =0000000000000004 R9 =0000000000000010 R10=0000000000000010 R11=0000000000000001
R12=0000000000002710 R13=0000000000000060 R14=fffffbfff0e7c728 R15=dffffc0000000000
RIP=ffffffff8240fd11 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2d927000 CR3=000000001dc64000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff4ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000