51cd873143af3058be", 0xa0, 0x3, 0x0, 0x2, r1}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x6, 0x1444, r0, &(0x7f0000000a40)="ff07f0c69596233097d5e015c061eb2ca1123b0f8c604b3fb0fa1f4c72e2acde74041fa094a91d104446d7499ac05bcdf0968c8b5bbd8e7db3650667c383a0d9356427d9f2a07b69960d349be68c69026882f97a181385c3b78a3e8c1e8a05b03e0673ff70ca92156d549ca4dc1cba4d00ed3255f04e00453edb16aa1788100d0ade3d909ab2ec20070b04976f082975de11b473af94d7dd33c3675804601a120ae109044038c951a77ace6def7524b067c09086ae9f8369883563333628de5bfdb5a00849bd38c3702d12a0005d5510dc5ecfad5ec6d551c4fc8f6b1437287a0110ad9dd79a5a9c4e6a6d188cd18d7438", 0xf1, 0x7, 0x0, 0x7, r3}])
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
openat$sr(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r4, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5bae}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x34}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000081}, 0x80)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
readv(r5, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
io_uring_register$IORING_UNREGISTER_EVENTFD(r6, 0x5, 0x0, 0x0)
r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000002000000000000000100000000000000", @ANYRES32=r5, @ANYBLOB="00000000090000000000000000000000000000000000f9b500000000"])

[ 2264.148150] loop3: detected capacity change from 0 to 40
[ 2264.182946] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:15:17 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0xfffffff0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:15:17 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {0x0}], 0x2)

[ 2264.233482] syz-executor.3: attempt to access beyond end of device
[ 2264.233482] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2264.234449] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:15:17 executing program 5:
shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000001c0)=""/155)
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00')
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:15:17 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@quota}]})

16:15:17 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:15:17 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

16:15:17 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001) (fail_nth: 100)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:15:17 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0xffffffff, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2264.405580] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2264.425705] loop3: detected capacity change from 0 to 40
[ 2264.449486] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2264.464405] syz-executor.3: attempt to access beyond end of device
[ 2264.464405] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2264.465318] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2264.469073] No source specified
16:15:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:15:30 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x67, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:15:30 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@quota}]})

16:15:30 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x190000, &(0x7f0000000200)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x3f}}], [{@dont_measure}, {@smackfshat={'smackfshat', 0x3d, 'quota'}}]}})
r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})
faccessat(r0, &(0x7f0000000300)='./file0\x00', 0x52)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0)

16:15:30 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0xf, r1, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:15:30 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

16:15:30 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:15:30 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4044, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r0, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
readv(r1, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:15:30 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:15:30 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

[ 2277.401089] No source specified
[ 2277.423026] loop3: detected capacity change from 0 to 40
[ 2277.446270] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2277.457945] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:15:30 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
ioctl$FIONCLEX(r0, 0x5450)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x62c500, 0x0)
sendfile(r1, r0, 0x0, 0xffffffffffff1277)
r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0)
read$hiddev(r2, &(0x7f00000008c0)=""/4096, 0x1000)

16:15:30 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@quota}]})

16:15:30 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

[ 2277.508046] syz-executor.3: attempt to access beyond end of device
[ 2277.508046] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2277.509631] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:15:30 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

16:15:30 executing program 5:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
openat2(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0xc00, 0x100, 0x17}, 0x18)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

[ 2277.566572] No source specified
16:15:30 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r1, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2277.622402] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:15:43 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x220)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:15:43 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x22, r1, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:15:43 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0xfd}}, './file0\x00'})
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x10000000000002de)

16:15:43 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:15:43 executing program 5:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xb36}}, './file0\x00'})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)=ANY=[@ANYBLOB="71756d74617617"])

16:15:43 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, 0x0)

16:15:43 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:15:43 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xf0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2290.785062] loop3: detected capacity change from 0 to 40
[ 2290.807104] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2290.816083] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2290.822804] ext4: Unknown parameter 'qumtav'
[ 2290.854448] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'.
16:15:44 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, 0x0)

16:15:44 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:15:44 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xffffffff, 0x9996, 0x8, 0x7, 0x33})

16:15:56 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x21e, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:15:56 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x25, r1, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:15:56 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, 0x0)

16:15:56 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x4}}, './file0\x00'})
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='bridge0\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
readv(r1, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000300)=""/174, 0x61}, {&(0x7f00000008c0)=""/4086}], 0x2)

[ 2303.692924] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.4'.
16:15:56 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)=ANY=[@ANYBLOB="7175df57612c00"])
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, &(0x7f0000000200)='\x00')

16:15:56 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10002)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:15:56 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:15:56 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

[ 2303.703801] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2303.705374] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2303.720605] ext4: Unknown parameter 'qu�Wa'
[ 2303.730763] loop3: detected capacity change from 0 to 40
[ 2303.735315] proc: Unknown parameter 'qu�Wa'
16:15:56 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:15:56 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

[ 2303.780838] syz-executor.3: attempt to access beyond end of device
[ 2303.780838] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2303.781742] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2303.806014] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:15:57 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
syz_io_uring_setup(0x52e0, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000600)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)={0x0, 0x989680}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x101)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:16:10 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x600, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:16:10 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140))
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000180))
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=<r2=>0x0)
process_vm_readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/114, 0x72}], 0x1, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f0000000280)=""/108, 0x6c}, {&(0x7f00000004c0)=""/80, 0x50}], 0x3, 0x0)

16:16:10 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:16:10 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x140, r1, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:16:10 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:16:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10003)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:16:10 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:16:10 executing program 5:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
acct(&(0x7f0000000080)='./file1\x00')
r1 = syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x1884ae, &(0x7f00000001c0)=ANY=[])
move_mount(r1, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00', 0x0)

[ 2316.845185] loop3: detected capacity change from 0 to 40
16:16:10 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

[ 2316.880370] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2316.902531] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2316.905158] syz-executor.3: attempt to access beyond end of device
[ 2316.905158] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2316.906117] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:16:10 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:16:10 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x863000, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:16:10 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:16:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10004)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:16:10 executing program 1:
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

[ 2317.001914] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:16:10 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0xec0, r1, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2317.015944] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2317.031902] loop3: detected capacity change from 0 to 40
[ 2317.038172] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:16:10 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 2317.054466] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2317.092075] syz-executor.3: attempt to access beyond end of device
[ 2317.092075] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2317.093239] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2317.100404] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:16:22 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:16:22 executing program 1:
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:16:22 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x800, 0x10)

16:16:22 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10005)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:16:22 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xf00, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:16:22 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10002)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:16:22 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x33fe0, r1, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:16:22 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0, 0x0, 0x2311001, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

[ 2329.730636] loop3: detected capacity change from 0 to 40
[ 2329.736341] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2329.739470] loop7: detected capacity change from 0 to 40
[ 2329.744994] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2329.763349] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:16:22 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x7ffff000, r1, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:16:23 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:16:23 executing program 1:
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

[ 2329.832348] syz-executor.7: attempt to access beyond end of device
[ 2329.832348] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2329.833176] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2329.847089] syz-executor.3: attempt to access beyond end of device
[ 2329.847089] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2329.848915] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:16:23 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x80000044)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
r1 = fsmount(0xffffffffffffffff, 0x0, 0x7a)
openat(r1, &(0x7f0000000200)='./file0\x00', 0x101000, 0x52)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x20000, 0x0, 0x0, 0x82445, &(0x7f0000000100)=ANY=[@ANYRES32=r0])
open(&(0x7f0000000180)='./file0\x00', 0x2, 0x101)

16:16:23 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r0, 0x9)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

[ 2329.962052] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2330.002314] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:16:36 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:16:36 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0xfffffdef, r1, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:16:36 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10008)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:16:36 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x1e02, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:16:36 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:16:36 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
mount(&(0x7f0000000100)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='udf\x00', 0x2000000, &(0x7f00000001c0)=')^],^(\x00')
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f00000002c0)=ANY=[@ANYBLOB="5b1afa4d23920665d8935c64fbcb61a38ad997f651dd80f2115522190241003ee607c11d132ee90e867f07dd73f2581b94df95517fb400a81a27dcdfe5364fad308320b9691d91bc8c6d9bee46cacfde36f45744bcfa17a335411f38be1989a5217ae59f138d592e750124671d1dff559d5ae30dd4af2dc30ad77222b04d0d523e9021893aba18c379082922b06941e185ca706517630b54d876e347ce0ee1e6f0429f1952cf0f8fa437341bb9eea4f311792dd17c80abe9cfab8970533917348f68dfc5e8b78558066886457c71fb4d"])

16:16:36 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x7ffff000, r1, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:16:36 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0)
pread64(r1, &(0x7f0000000040)=""/190, 0xbe, 0xffffffffffffffff)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
creat(&(0x7f0000000100)='./file0\x00', 0xc2)

[ 2343.202973] loop3: detected capacity change from 0 to 40
[ 2343.229650] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2343.258480] ext4: Unknown parameter '[�M#�eؓ\d��a��ٗ�Q݀�U"A'
[ 2343.280632] syz-executor.3: attempt to access beyond end of device
[ 2343.280632] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2343.282048] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2343.310509] syz-executor.3: attempt to access beyond end of device
[ 2343.310509] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2343.311932] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:16:36 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:16:36 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:16:36 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:16:36 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10009)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:16:36 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x2, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2343.484446] loop3: detected capacity change from 0 to 40
16:16:36 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

[ 2343.500007] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:16:36 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x4, 0x7, &(0x7f0000002580)=[{&(0x7f0000000300)="c9ba7543b8aef815e46694aa8f215d7f93d2df94aedd07f63f1c2960729779727c3f34b39dd710fa8220b25e", 0x2c, 0x6}, {&(0x7f0000000340), 0x0, 0xf890000000000000}, {&(0x7f0000000380)="bf67578b801b2d2aec51d796216bd9b53c6a36c8092bbb5149e27d08fb8264efb9d44d58bf69e4d899c2103ef7167f8dd04118d586db686227a0cbf044866ea8b12f9f962e5e1e9b01fe820052d397b3f8dbb1546b8940db376c6583cbd04b6807fae8a7cacaa27c74219fefa0c8e0e47b70fc7ab78d9df55f8bfda4536157803f70b82e94892976b16e2825e91a88f003c7da32a0921fc605ead1166d58c1dba4c942ede9b1c88c1971bcc7881143402ec1d0ac1ea8", 0xb6, 0x40}, {&(0x7f0000000440)="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", 0x1000, 0x5e8}, {&(0x7f0000001440)="9b6579638fbe42f57a2a830e42b6163f68f45da3cd7a7b8a2a94d6aa2adc4812c20c63b582cf09b294ea5bb3a73dca641a2ae5da380265a41d7955b5adb444417633d950dfd6a10c150f900f3e4a46dbc5902f2c37e26702da38789c327868c281bdabc02541d54fbda05071de6d07f12634832436ce2252215ea57369111a47f2e5a744aa485b532b7c20714b746b6876af039217dd6adf8fab1eec807639271e6d5d08b4448fde0e0f73626d007483c6b84da0b384b945", 0xb8, 0x4}, {&(0x7f0000001500)="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", 0x1000, 0x7}, {&(0x7f0000002500)="618397ccd5a64238eb2ad45d947a52adc485182e05bdb3e32b12d7ce25e45fd4e7405f64048540f1eeb45ede15b92e33538071dbc67ae1eed341cccb7f09ca4ce5184004178614ea3f57cb63b09d", 0x4e, 0x9}], 0x40, &(0x7f0000002640)={[], [{@fowner_lt={'fowner<', r0}}, {@euid_eq}, {@euid_lt={'euid<', r1}}, {@hash}]})
r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000026c0)='devices.allow\x00', 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000002700)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x60000001}, r2}, 0x80)
mount(&(0x7f0000000140)=@sr0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='gfs2\x00', 0x100000, &(0x7f0000000200)=']$\x00')

[ 2343.596403] syz-executor.3: attempt to access beyond end of device
[ 2343.596403] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2343.598203] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:16:36 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:16:36 executing program 2:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/mcfilter\x00')
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000040))
readv(r1, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

[ 2343.640126] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2343.678621] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2343.765018] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:16:50 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r5=>0x0})
bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
r6 = syz_mount_image$nfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x56, 0x1, &(0x7f0000000240)=[{&(0x7f00000008c0)="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", 0x1000, 0x4}], 0x60, &(0x7f0000000540)=ANY=[@ANYBLOB="2caaaaaaaaaa2c2a5e2915402c2c2c73797a5f74756e002c002c2c09292f212c677470002caaaaaaaaaa2c6d61736b3d4d41595f415050454e442c6673636f6e746578743d757365725f752c646f6e745f686173682c646f6e745f686173682c7569643e", @ANYRESDEC=0xee00, @ANYBLOB="2c736d61636b66737472616e736d7574653d7b2c6f626a5f747970653daaaaaaaaaa2c61756469742c653569643e31777be00200000000000000bad3fbc2d9", @ANYRESDEC=0xee01, @ANYBLOB=',\x00'])
sendfile(r6, r4, &(0x7f0000000280)=0xfff, 0x40)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020c29bd7000ffdbdf250100000008000500ac1414aa08000100", @ANYRES32=r5, @ANYBLOB="0c000300050000000000000008000700", @ANYRES32=r1, @ANYBLOB="08000800020000000800a2000400000008000800140000000600062a98e6cceb090700a18b7c5eb6795929a607154729e972e8055b9e53048f7a0c297fbefb1c3c9ad27350d722ff9297c827ad21c334618d251fde85830b26d0e2313e7b35d83e936316fb1da54faf3acedbcb3c"], 0x58}}, 0x80)
sendfile(r4, r0, &(0x7f00000002c0)=0xc96d, 0x9)

16:16:50 executing program 1:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:16:50 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x1000a)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:16:50 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:16:50 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:16:50 executing program 5:
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0xe100, 0x1)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat(r1, &(0x7f0000000340)='./file0\x00', 0x20200, 0x18a)
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3a}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00', <r2=>0x0})
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000400)={@remote, @loopback, <r3=>0x0}, &(0x7f0000000440)=0xc)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf250100000008000200040000001c000180050002000000000008000700", @ANYRES32=r2, @ANYBLOB="08000300ffffffff080002000200000040000180060001000200000008000700", @ANYRES32=r3, @ANYBLOB="06000100357a000014000400fe8000000000000000000000020001000000050002003f000000080002000400000003fdffff06000100000800000008000700000000000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="14000400ff0200000000000000000000000000010c00018008000300ac14141708000200000000004800018005000200ff000000060005004e22000008000700", @ANYRES32=0x0, @ANYBLOB="14000400fe8000000000000000000000000000200600010002000000060005004e22000008000700", @ANYRES32=0x0, @ANYBLOB], 0x124}, 0x1, 0x0, 0x0, 0x20050000}, 0x4084)
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:16:50 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x6700, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:16:50 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x4, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2357.302439] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:16:50 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:16:50 executing program 1:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

[ 2357.354082] loop3: detected capacity change from 0 to 40
16:16:50 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x8, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2357.381768] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:16:50 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

[ 2357.384740] loop2: detected capacity change from 0 to 8
16:16:50 executing program 1:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

[ 2357.458864] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2357.471952] syz-executor.3: attempt to access beyond end of device
[ 2357.471952] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2357.473741] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:16:50 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:16:50 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x9, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:16:50 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:16:50 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

[ 2357.593655] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:17:03 executing program 7:
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:17:03 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:17:03 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x1000d)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:17:03 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, 0x0, 0x0)

16:17:03 executing program 2:
r0 = semget(0x2, 0x0, 0x120)
semctl$IPC_RMID(r0, 0x0, 0x0)
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x150c07b90f700a0a}, {0x1, 0x3f}, {0x1, 0xfffb, 0x800}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0x4, 0x800}, {0x4, 0x8, 0x1800}], 0x7, &(0x7f0000000080)={0x77359400})
r1 = semget$private(0x0, 0x5, 0x0)
semtimedop(r1, &(0x7f0000000100)=[{0x0, 0x2}, {}], 0x2, 0x0)
r2 = semget$private(0x0, 0x3, 0x2)
semtimedop(r2, &(0x7f0000000180)=[{0x4, 0x1, 0x1000}, {0x0, 0x3, 0x800}, {0x0, 0x7, 0x1800}, {0x0, 0x1, 0x1800}, {0x4, 0xff, 0x1000}, {0x0, 0xbe, 0x800}], 0x6, &(0x7f00000001c0)={0x0, 0x989680})
semctl$SEM_INFO(r0, 0x5, 0x13, &(0x7f0000000200)=""/188)
semget$private(0x0, 0x2, 0x401)
semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0xee01}})
clock_gettime(0x0, &(0x7f0000000100)={<r3=>0x0, <r4=>0x0})
semtimedop(r1, &(0x7f00000000c0)=[{0x0, 0x8b, 0x800}, {0x0, 0x7, 0x1000}, {0x0, 0xffff, 0x800}], 0x3, &(0x7f0000000140)={r3, r4+60000000})
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
readv(r5, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:17:03 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x2b, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:17:03 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xf000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:17:03 executing program 5:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {<r2=>0xee01, 0xee01}}, './file0\x00'})
mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x1001800, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}, {@msize={'msize', 0x3d, 0x1}}, {@access_user}, {@version_u}, {@cache_none}, {@uname={'uname', 0x3d, '@:-)+'}}, {@dfltgid}, {@version_u}], [{@appraise_type}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@uid_eq={'uid', 0x3d, r2}}, {@measure}, {@appraise}, {@context={'context', 0x3d, 'root'}}, {@appraise}]}})
r3 = memfd_secret(0x0)
fcntl$dupfd(r3, 0x406, r1)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

[ 2370.059841] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:17:03 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

[ 2370.101177] loop3: detected capacity change from 0 to 40
[ 2370.120372] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:17:03 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x500, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:17:03 executing program 7:
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:17:03 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, 0x0, 0x0)

[ 2370.150372] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2370.171764] syz-executor.3: attempt to access beyond end of device
[ 2370.171764] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2370.175559] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:17:03 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:17:03 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000140)=ANY=[@ANYBLOB="71756f74612ce31f42567bc10d0600"])

[ 2370.298933] ext4: Unknown parameter '�BV{�'
[ 2370.304511] ext4: Unknown parameter '�BV{�'
16:17:16 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x80000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:17:16 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x14000, 0x0)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x2)

16:17:16 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:17:16 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:17:16 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x1000f)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:17:16 executing program 7:
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:17:16 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x4, 0x0, 0x0, 0x410, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f00000004c0)=ANY=[@ANYBLOB="7165f4ad7379009fd91d171664502e94d39fb8bfd1c2a94b31cc457dec3aa2652333729cec6fb0"])
mount(&(0x7f0000000140)=ANY=[@ANYBLOB="1a870000000000000007"], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='tmpfs\x00', 0x56480, &(0x7f0000000200)='quota')
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0))
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x402080, 0x0)
r2 = getgid()
r3 = getgid()
setresgid(r2, r3, 0x0)
setresgid(r2, r3, r3)
stat(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
mount$9p_fd(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x1000800, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r2}}, {@version_9p2000}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@subj_role={'subj_role', 0x3d, 'ext\x01\x00\x00\x80\xd2\xb2i\f)?5+\x0e\xb7\xfa\x9ct\xe9]\x15}\x8f+\xa7\xb5t\xd5\xcd\x7f\xe5\xbc\xdd5\x14\xa8DFvF\xa2\x1c\xad\xbb$\x82$Xv\x9acx\xf4N\x12\x7f:;6\xea\xd2\x1b\xadr/\xc9\xa6\xf0\xe4\x10~\xa5\xa7-i\xa0\x18\xeb\x87\xc6$\\\xce9#\xdc@s\x91W\x95\xc2\x7f\xb3\x1cY\x10y\x00{d\x9a\xa7\xf8\x00\xb3nZ\xc0\xd4\xb9]\xe4hY\xc3\x17\b\xbe\xff\xcf\xc5o<\xae\xd8\x19\x86k/\xa6O~\xc5c3W\xa1\xae\xb7f\x85\xb4@\x88j;*\xcf\x1a\xb0Y\xe7/mfmb\xfe@\x11g\xbc\x98N\xdcF\xd5\xd6\xebN\xadQ\xbd\xee\xb1\\\x1f\x18u\x8by\xb7c,\xdd\x11\xf3T\x98\xabX\x03\xdaw\xb8>eM\x04\xd0\xabP\xe9Jh\xab\xd7\x12\x10H\xb8B3\x94e\x0f7'}}]}})

16:17:16 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, 0x0, 0x0)

[ 2383.466725] ext4: Unknown parameter 'qe��sy'
16:17:16 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

[ 2383.494528] loop3: detected capacity change from 0 to 40
16:17:16 executing program 7:
r0 = syz_open_procfs(0x0, 0x0)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

[ 2383.515027] ext4: Unknown parameter 'qe��sy'
16:17:16 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x2, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:17:16 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', 0x0, 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

[ 2383.549263] syz-executor.3: attempt to access beyond end of device
[ 2383.549263] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2383.550395] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2383.572844] syz-executor.3: attempt to access beyond end of device
[ 2383.572844] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2383.574082] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:17:16 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

16:17:16 executing program 5:
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x5, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="c247831fbdba62d72195a1fda024da7024b97c46e6198941e859b3b9e518c82aee8e7d1bda375f10e05d195111a9780d9f4fb6d15266a0a665881f045379f1daeaaa918ea0cf3ad71729b4", 0x4b, 0x7}], 0x80000, &(0x7f00000002c0)={[{@huge_always}, {@huge_within_size}, {@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}, {@nr_blocks={'nr_blocks', 0x3d, [0x2d, 0x0, 0x35, 0x70, 0x54, 0x32, 0x32, 0x45]}}, {@huge_never}], [{@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '%&#)-\''}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@measure}, {@fsname}, {@fowner_lt}, {@fowner_eq={'fowner', 0x3d, r0}}, {@euid_lt={'euid<', r1}}]})
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:17:16 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$CDROMPLAYBLK(r1, 0x5317, &(0x7f0000000040)={0x6, 0x401})

16:17:16 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', 0x0, 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

[ 2383.660122] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:17:30 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

16:17:30 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
pread64(r0, &(0x7f0000000040)=""/218, 0xda, 0x6)

16:17:30 executing program 7:
r0 = syz_open_procfs(0x0, 0x0)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:17:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10010)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:17:30 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xf0ffff, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:17:30 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x3, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:17:30 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', 0x0, 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:17:30 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='virtiofs\x00', 0x42004, &(0x7f0000000380)='&\x00')
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})
mount(&(0x7f0000000140)=@sr0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x2382016, &(0x7f0000000200)='%$\x00')
faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10, 0x200)

[ 2397.201079] loop3: detected capacity change from 0 to 40
[ 2397.278508] syz-executor.3: attempt to access beyond end of device
[ 2397.278508] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2397.280115] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:17:30 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {0x0}], 0x2)

[ 2397.296888] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2397.299410] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:17:30 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x4, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:17:30 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x0)
pwrite64(r0, &(0x7f0000000140)="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", 0xfd, 0x3f)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x3, 0x8001}, @timestamp, @timestamp, @mss={0x2, 0x3}, @timestamp], 0x5)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f00000002c0)=ANY=[@ANYBLOB="71756f74612c009a5a9cb0d58173c8a6a68a83ee5ae1412a8b1486b157a7990c892e2290906dfb4a8043472704767313b0e0feafb2b5faa7870ca516a2c5d3adc963410ab7c288bc4e5a88a010109cea2234f6ef433b646fec6cdfaa6752675cd7f89cc2fc294424ff273739c24c0dfc2d5f851c088da0ab9f2ba3ef45e71f380815e4d8f9c243092a537a1bb024a9cecaefe6d0eca97cef81fa4c8d3f69264ea0a93faff1753ec6a464"])

[ 2397.338879] syz-executor.3: attempt to access beyond end of device
[ 2397.338879] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2397.340672] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:17:30 executing program 7:
r0 = syz_open_procfs(0x0, 0x0)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:17:30 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@quota}]})

[ 2397.415059] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:17:30 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x5, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2397.455177] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:17:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10011)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:17:30 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x1000000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:17:30 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
pread64(r0, &(0x7f0000000040)=""/205, 0xcd, 0x7)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0)
close(r1)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
r2 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0)
dup2(r2, r3)
r4 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000140)={r4})

16:17:30 executing program 5:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000480)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='pvfs2\x00', 0x1080081, &(0x7f0000000440)='MAY_READ')
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})
openat(r0, &(0x7f0000000140)='./file0\x00', 0x10000, 0x10)
r1 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x0)
pwrite64(r1, &(0x7f00000004c0)="536d9696a1e39f47253e7436c226afbeaaefeda292ee8cf997daafe3534319170a9ef4383d1ad1855324d4cc1070cf33789f0096aecb08833967a4aa51fc121e53c503d82058461e5fe0962dee2af6e64c83d2c209a7cc7e368bc20d088893823fa885a5fbe834ab2c9206b7868721ecdefea3b6b0672178d690ea6b7cb2c7316b643032f0db7a84021a5f299ef36c318a3131df8d666626b585c66b8b2ecc986e18a1a1e8c36f8590242eee0ec6c79fc4eb22360e80a7dfb44476d6cf7f3d562a028c7d195f6ffa1c6f48c578bd378b6f31765391d2b336e462e008f2ce0e1cbc", 0xe1, 0xfffffffffffffffc)
mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1001c30, &(0x7f00000002c0)={'trans=virtio,', {[{@afid={'afid', 0x3d, 0x2}}], [{@uid_gt={'uid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@subj_role={'subj_role', 0x3d, 'ext3\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_type={'obj_type', 0x3d, '^\xb6'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@permit_directio}, {@dont_measure}]}})

16:17:30 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {0x0}], 0x2)

[ 2397.552413] No source specified
[ 2397.581552] loop3: detected capacity change from 0 to 40
[ 2397.583980] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2397.595160] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2397.660336] syz-executor.3: attempt to access beyond end of device
[ 2397.660336] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2397.661366] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:17:43 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x161428, 0x0)
chroot(&(0x7f0000000140)='./file0\x00')
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)=ANY=[@ANYBLOB])

16:17:43 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x6, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:17:43 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:17:43 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x2000000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:17:43 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@quota}]})

16:17:43 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10025)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[ 2410.374966] loop3: detected capacity change from 0 to 40
[ 2410.389693] No source specified
16:17:43 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {0x0}], 0x2)

16:17:43 executing program 7:
syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:17:43 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x7, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2410.440014] syz-executor.3: attempt to access beyond end of device
[ 2410.440014] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2410.440947] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:17:43 executing program 7:
syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:17:43 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@quota}]})

16:17:43 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
r1 = accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'syztnl1\x00', <r2=>0x0, 0x4, 0x20, 0x0, 0x0, 0x64, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x80, 0x840b, 0x4}})
sendmsg$inet(r1, &(0x7f0000000b40)={&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000140)="c5da4fd56dc202a618f719132517b9a004671694c2ca6a556c3247ff0a377351ec36cced0eefd7a7fa1eabfa", 0x2c}, {&(0x7f0000000180)="a40bc0d010278796b68ce2eb7416b47faa7471217ea4ee2d95c0552d880877b5291a82380bce80a73ef16cfe5905018b50a56f2ecf110bfb5f7a88ce042d26613c8241163df82a4adda075c302156c7c17f2c402f32053140502e53cacd5ba3a6f43504744aafc704f529b6463bb33f4f78f2b890ddc922058d82aa81a3cfc569d45aa45995b44eca5755645c6befe35c703b87fff7638b0e7f0ee8643725fa7843def1334232b68ffd8f08e3307980db3f207240c30080c99673f7dec3800c5", 0xc0}, {&(0x7f0000000240)="fb64b0a4f5b63616a2b05767f56582d7a61474050a74f570e45858064b1192354bc2f758f81c7e9d70f124edf47cee48b76334236424b4eff7c663c994c86f8a1b9912ddb73ceb92804db01cad9daa74ef935051a0e403fe7098904086f6935fa43b24504b4f4fcbacc148df527bfb0b709ff9433ebece5a9260a23ff97d33fa3d54", 0x82}, {&(0x7f00000003c0)="7b5e85e68852bbfdc0d58b2cd4f422881046c6b5c8c10c76", 0x18}, {&(0x7f0000000400)="2688d2657cfbba1aeaae132c0c95e18978c487b83a66b98fa93903e001291f8251cf8a5e77751f9dee94887ac8e6e0c56b629aefd30daf3c60a72d15782b4faacdb350b8e6a0f711408f5fbed06b9843697476e322e34dc99fcebea6f0cce0858110e8ca9f83a26af7f1a96c4900ea6ba980edb663a42933e446c2185b36567c8ea94a7f0b279b2e32eb56be30e91dacb0a9fd1db44fd223111fdbaf17eb39306f1c9875746548b40e41c6ec42edb0e08806df4f84ab8c36d21af24856f8a0d2c80350226a6639963cbee4e36c4cd0e33411fd27f6634769dfd1d8017f57e212a0336a6498abf0155a", 0xe9}, {&(0x7f0000000500)="91e6b3ffe74c448e5a12990a7f688c125f0880a59b", 0x15}, {&(0x7f0000000540)="d814f3323bcc7c40b7eb674868cb7600fb3d50e7a3f225c95627181a9546452ef62bd3b7e9ae3a8f31a7994e5163db86bdf1feeea11cbaeab74b28f603638ce4cc7382733f7514a92d6aef519eed0665bee98534bd164a9a2e13bce0871471e732757fb12d5b02b29d7ff86a935da3082378ad4b8533ed000a8eab300505c4d95bd8fa6ff9a245f8df5f", 0x8a}, {&(0x7f0000000600)="04e2fa67fc162172a54afd426dd931e0d3d5661d8c3f605718b8e9620af35e3da024a50edba5c6a147418c830170ab4539aad506bac12fe62982e8add9cf47e73c095a9660d71eef94c430f4ff811ba62c6af5437501b85a04becd7d6e9f9a75d457cf884d9ae8dbbe662ddd0070cf98f929fbca46a51957308539af", 0x7c}, {&(0x7f0000000680)="38eca4fd6fdc1363cacb0c03374b4a0c838d1bc2504b09fca8ebd27844513288b98f8a83ecc48665188bee340c64a1d7a20916f3011b76e477f3d8b7aa8dd655cbf78515f4133a383b01828a9e535416d97153826078036fe2d142572f109d34a50fccab4deb0428eb313b03dbbc024a", 0x70}, {&(0x7f0000000700)="1a7d42159cdf0daeb6e7eb5416939ff598e70b155a1626b8bd232e09bc88ccbdc89b5f0e57b1d2631a69dab042a657b6f7496b56df2f15bfa8b5438f746f256ac428b1459cb74ab38b8d6e6d1a2b32f00d7930eea575a942de1e03555ef131bc1582328e0a094552f51912ab32c5a3491e44159812d736b3d6b9b79e0fb60e4acb34d101a929a2aaa81b8de1f9d57849ada7577c77344a78dc3150dd4574890e0f63a8734f22afae794f072e7f1d80b4122697b4e8ce81ed51cf27", 0xbb}], 0xa, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="ac1414bb6401010100000000"], 0xe0}, 0x4000)
r3 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000040)={'veth1_macvtap\x00', {0x2, 0x0, @remote}})
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:17:43 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

16:17:43 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10300)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:17:43 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f00000002c0)=ANY=[@ANYBLOB="71756f74612c004101614a17e4f261d1ce89376e4d51e73739b6c0ead250b0aeb3048edc8c5e5aca69662154e77d0c0785585c628739b469fae3c561152ff937e55d9b10720f32a5c4532b6b29a8ad0ee7d13320e66e79c0f4bdc76ce00ac97ea2b1c3a8b70ce5b1f1f51ee83f1b454e4220b0f53b04b4b3877b379dbbdb72563fc9964f3df4e276751c467dfcce55557d9ba346c597f664e6f1f29339ea1d9ef40511d9a69849e37fa76111203c"])
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0xffff}}, './file0\x00'})
setxattr$security_capability(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000240), &(0x7f0000000380)=@v1={0x1000000, [{0x3fc0000, 0x7ff}]}, 0xc, 0x3)
rename(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00')
accept4$unix(r1, 0x0, &(0x7f0000000180), 0x80000)

[ 2410.575358] loop3: detected capacity change from 0 to 40
16:17:43 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x8, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2410.592258] No source specified
[ 2410.633417] syz-executor.3: attempt to access beyond end of device
[ 2410.633417] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2410.634325] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:17:43 executing program 7:
syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

[ 2410.710633] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2410.720050] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:17:57 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x4000000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:17:57 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
readv(r0, 0x0, 0x0)

16:17:57 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10500)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:17:57 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

16:17:57 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x9, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:17:57 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x745e}}, './file0\x00'})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})

16:17:57 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)="214c6b3eaf92f3949115ddf4e1d0f790544bb744f1039336e91f279e115054f116499f21cf77f4c051f8cf797d6af320362de1a26d9d4c2eba5062d923a99c43583cb02e32c18173c48545db3ba7a9a28c13e4943fbefc25173cc88e090eb533e387aa6be359d9027d58318c88dabc0628c1495a000baeb6789be1e480d08e4cc59d3bacc99625c3b5b52efd1078f1c1795699f9187f6505", 0x98}, {&(0x7f00000003c0)="b038583f0b578242a6124b3d37ba3f415990390e3e333bd176a72ef699e8cf95f744ec439305e993a723dd11fe8969b17d24d0e55473a3b49556fbe115eb0ef4ea2a1591008363b93e1a30ccd05bf4e758a186780b8e8472d3b81d298ffa73cf00000002000000000000", 0x6a}, {&(0x7f0000000140)="e55d34a917103954415827a5cb2b58f2a9be96ffafaaab02fc9ac14cf108c0da55da3ccb4a04e079e45f", 0x2a}, {&(0x7f0000000180)="204ae03aa8991c2d2c4d12268b75327c4f53ad1c714c6df2f40a292a6eac14f1c2bb8a3a7775adb515ab0f65500c281e384f8be0f1bbc3e9c6001cad31638aa25c531c9f5ec35abace78fcf2e293d85ec6b79fc75185a3f8c0eee35023bbe7c7ecdb261a5447bcbc11a41453decfd53580890833f4a83e249138b77eb8c466ba660186c9de5d52da6ff71c71bcdc2fc85dd08e5b4c23851678594dced72b76624ed7c96b56a16d0df78018a9f07227d0e4e4d76da97be91f4069ecb5e1992c407fa306b7a4faaf2ad5a9b8b383", 0xcd}, {&(0x7f00000008c0)="b9c8d205c577b7262c22c40f8d15e9ebc5b5cc217dc167faa9be833e1870bc87709af134f957a1dd385220c222784f14f35f4f00fe41ebc3f724d0cbc9efd619f0dcd60329bab9f2ae129ee38063ba76dd9d08dd86099be552e1557a3c7b04c4ff0b0b1475d0fa9aa6ab43fc98adb68d06bd52a1f945cf1ae0a13b1fc97884d2095da80059e240fd34aff6b4f0ac71776e2083340b05aa64fbe2c13a189639ce5575066bb65d2efb68d6473bc390f331a2853abe12451f802af6a3c29c6c4f8c79dca11feb2ac8908a01eab002d1b923a92ec71faf97dac9087cec84b8f6", 0xde}, {&(0x7f0000000280)="9e2cbb81a0418fdc6f75d9fbe842a14e4ed7f8a3d75c8c8dddb51a6f32fb0663293f490fe1abde5c962b2b7808986b1a60727492d85c4b65eb1ee926c9de78f4d46bff04046cd3de039885bc70a2480f4a57f75cbba0fcdd4401d63abd5a3394c4ee9bc59c7c978c8e4994807f1ed32a68cd987c", 0x74}], 0x6, 0x5, 0x82)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x146}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x400}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004000}, 0x40)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000740)={0x53, 0xab9b18ac679bc3bd, 0x4b, 0x2, @scatter={0x1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/73, 0x49}]}, &(0x7f00000005c0)="61892e74d2e3d0542b00c4af20c0a173acdb4949cb70d25c175991f1e882afc075c100b5039c1c37e91a6a37871d50feb618f68a0df4510426d68bf27d54ca1eb408448ec585f299cfb44c", &(0x7f0000000640)=""/154, 0x0, 0x10024, 0x2, &(0x7f0000000700)})

16:17:57 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, 0x0)

16:17:57 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, 0x0)

[ 2424.305178] loop3: detected capacity change from 0 to 40
[ 2424.383651] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:17:57 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

[ 2424.404737] syz-executor.3: attempt to access beyond end of device
[ 2424.404737] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2424.406352] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:17:57 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, 0x0)

[ 2424.430752] syz-executor.3: attempt to access beyond end of device
[ 2424.430752] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2424.431647] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2424.434010] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:17:57 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
readv(r0, 0x0, 0x0)

16:17:57 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10505)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:17:57 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xf, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:17:57 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})
newfstatat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2000)
syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x6, 0x5, &(0x7f00000013c0)=[{&(0x7f00000001c0)="e21c384db60541ef27f5f471bea4a9a52ef05cf02ce54c489096c1332e1a0e1eb75d0429698578a34d286889e1a89cd0c02719cea34120e683d6e30884c28e754a5e20ac7652463df7ea5006b335b81c3836219547843132a4f825e4299c50eda83f98d7d04396544696300e0cbe8e1f5287d1e5b5f38cc0617af4c6ccc1af8a790fc882b2dde8529bc878c46684160bd130418f981eeed49791ce8ee730820b89d22c7bd6e450ae862500e77578230af9", 0xb1, 0x7ff}, {&(0x7f00000002c0)="188fced38ce24e8aa18d", 0xa, 0xe4}, {&(0x7f0000000300)="dc1a17a837dca7a5741d7607932776c0fdfdb675dd25ef3500fb8332187b97207470462d1c233bd86aa968", 0x2b, 0x5}, {&(0x7f0000000340)="6d08c00aaf178b59e42d233ad5319a2841535b046bdbcd220949d520fbf33985f9a97af49a7057d35160593a69fcdab0fc1fdd5ac700123e4264890bdf4576e921658decbaea34534e5b5e6a04", 0x4d, 0x1}, {&(0x7f00000003c0)="7df59e835e83bbe3ea574862858290b042649b15c035ea608fbf2f6f947cef929b2f3121eb50591e209afca6dd895a5b53778143b0ae115e88dedbde5f127036b10fe835799659e0a0f77030f863e399927c0be1c64443e95b05c77a18b72f96498ebe56c458101cf3b2f05639a065f245c6f3b27e761af0cec1528a38f0cfd045a1fe84812925e7866e4358230b690b857d4b9883e3635e9e1a55a4999cb3ef2075b3031c9c8de8f0ea569054a4c798c198996339e26eaffde3553c9069da2a36ebe6b218c3b9aec2360f24372a943761723843488e784341e7c961c6a058e643ac5cea78adb26429f939c0585aba8e01b046274267b15958a44af9e2045221294b26efbc036833b5d4430cb24caba15982368daa54772ca18e00ee9076df80dc27b0e4a557f61e8eaace4e27f18018fb20a8d46f13b9e200c936cc6705a228fe949767c687911ae34b6c5129bd331dac0456252d63e76093d6b08d682e8479e017ae3e85bf692812f856b422585007678d25129c5a881f29b1410fa8c0714ba73853b413f96be1bd8f71dd0347b851822289501f49a1ea4e0b854e29544cf9a3a36b203015b1f145ce9c602d6cc82ec505c66189429c745e680d60899e6bbaa0fdcaf4ef44fafd7ed16f378b1a0a68514fac3db98bfa4fda9e5026cd6f073cddd590ae4bdcb5ee043fe580d6a3c6481c44a7df1d902949859d6980ed747ef6666b5aae104f0374ced6f1b701a20f0239b4a40b1de03e3d6450fc845f0d51167c27a53fd67f747220db13f9980b6a79f134fb0244ff92601b695acb6e044b48180e5fea39f91f992876b25832f4f15c1332e8e6c325f195fa3e1b9dc37d60b0124a87b4a9e846d1b7dc38360ff9dfc6dd7c2c6f74701ff8e84268ea3011eaeb3798af1163f679a9b925581f99021bc4c3287b03622557f3c0986ed0f0737e6a616b5803e6792a42e2bf3b7db10deddf75af84326474ff0df70c48b5175d0212bd845c8ab99a5e90264ebe4700ef90b08193b0496b0a34c8bfd15ba8285aea4f094fd32d66df7380be1df77432377a8cba296e1492ae3a540959e37e1c8993e6bdcf47c47caa791a34db2ebe24b50d408e00ce94907ffe015723128120dccd45ed2067bdcfd68e0174737434aff445b389b56bedce4fc2b65aea3cda99f1f2ad264d1e73b0f663bc5a542ab22628924df95e35a152eb52783d736f945d85161aa83a21a4ea2c58a76a3e4bcdea6e1eba3348d831082015e860b7cbc9acef7abbee8e60d2c66a8eaea2b6918fdcb129e60bdf6d1f241dd87972f0f2bf243c2b19595a90428af43f3b3e2ce9978e23912a6eb8908566cddabe18924ca4ac3686cef623ee0af2cd9c12064dc16a0d6764699fe297f8e542b98842685e6707723a38e9d448c442d6ecf15831ae5eefe0ac6d7293a0f37707c9c18c436c21c87f301e3025499e2943a07f22a6b911ebe5b859ec8430d106181ed783423bb85c906fad3e59f5bed88b7d7dd2c65b9e9c2b441e949a5d2048c92569a0c49a42a3b63122881963b6ca833ec6f53f6a137e5f390ef2ce2d3b04d940e85ac4d51727a41ef8b8540d46f0555f214f2e2a71376c874fcf4d463f852969bcf766c2abda3b849ae1d888aeb17d9336c374b164d516696cefe990a5d158cba918fd81ff9328fa42f46bcaa71844b601f0244824b316993f4c424154677c8a3a7a59caac15efd4a374f66d3a6ead9f929b51c85b9d8bfd634a2392627a11c684546e38f27bf8539c024ff3fbee5feb73ad9a87f76a2337fd6164d7aae999caac8ac6019ed26e4b0ed8cb97866ca14aab80c7c11e2eb65ea6ceb558ae122851978c6b5bd16eedf775dd480fea6c64a9452542893ba7ed41f140eea260c90c533d4e2d6f83f8877b4e6e68c7c3ffbb4ae4879738cc791e43eb4bf72df66504d84720d9be879d1146f7dd3992a9e57df375c48882facd34e4adf987e89ec5ef57b64562b04b4d05b2756f360a1515142add306c9b72a01fef0d4f4cc656fe7334ed20004e4b55c7c48fba0e5d409c351526fe42b0a7282675f4a12a0c1d926bbdf37460b9a5a9c93141796ee72b80bf23f478c627b41a33a907ec4d27765a8496ff4a661b744b1847ebf1abf559cd08c0693ae6fe15a3a5de5e7c6f6e1818c7d95e639f59ab33963d9158f1a7629f29d509d9735e90c26398bac66951fd544760623ecc6b6e54b58454c9bdbf4a7caf3a58e54dd66939d35797587541f42c26edebad83aa91aee2252ac588b3e437b6feac6efd8b5f64a5f4ede20e5b3ecbc97dd627f3b8014ca93c7311959657390684fbedd9eaa96c556a337b0e0b98c2045476b7ff40df8a3ce12206ee46c029426d297da1004d779224470fcd5752de3b7dcaa2caae3e29d2417727b30390da3c3a2a2d8b13ccab8ed6b65de749611add1e6fead45ad74c461f2e48ae70fd73f18d0c229fd2f1123118008ec0ad6c55e97c1b5b3b7201f09fcd8be075fbd8f3eeba5a74fbcaf08bb48437d48250c7b299b2d866bce6923d9ee7d3c94716875dcec9c983abc40cc2ccd689d39a450ede29634f63a320738096070db033a3bfabf3d9fbb4072809f95118ce775c20395c42348fc61e4052628c6f59e64c70305318999a85347b14b5e5e0868f9d339d7e01628872709c5ecdb0b3cdb87995c8e01575fd9ee911e7b7aa4f0b286a43a97f8b9d106649ab599764cb487c8af877fd6b497ab8413be8cccb2e2211a94e0fcd7d7fbb57ec25f8d4f2e092afd790560e291f0462db97275c6cbd8d6f55a96895b2835a03eb12b1def286b3f0f0902fdf0d52e3f76cce270b30f318b5304c35edcaa8d26ed3eb1ff7c5a7883798d5c2807fc7ad87f6ad1220dfad1dd7a7cbfa4c28dcdb5bc3461fb84f443e4532c2ecfdc7bfb11a16640eb8b39288fdd664a9f31ac23e293c516ed5f30d50f7bac6c6ce011ddc168a583ba7299ef45ad7a9fe4342f32362cf7c7321413d0a7a6db6ed421cab6f76c533e3f740eaebc9556488f72c76fc3adee0aeabf276397836ffd2c6540b3cfbd0005ec1656a7a360977e90f4178b3ca0957669c3bff19c8e8b4bf58bae3835e3db3e42ceffb23bdbd7f259dea56f7fe62d2e9cbf2f6f3aac48e86c5cb29edb9e34b8a9dc9e0c2a10a155c208bff47f81bdce3d099dfcf2205ace36e19ae7134ed957f07492502c1fb89523334840ae2384b5864ed53fa06fcf175785af325746e2163b21b0cb6568eebb4fdfe4a6a783535d6e46257d5d0da37a636875209666f90f2ae8e05a1258f93dcc91c36a98574eeb055d8e1da366dd4d79a8026e4defb2e63a0eef49c10a5261bb04b1c7917888b49da74b57f6956b09decfe9c681f2dbf0728a678118dca346986f5f5122b5c577082de14b432e0dcc256c1f6f9a8ffeaa37b827c49d3be45ddfc2aa46ee01c4480f5c9731aaedac922dde93d2cbbf31351b7b50a7776e82211028d49aaa19e8f15709c49e26f2dedd33e3785dc2b797788cfab798591de610d8828539c5d5541183a5196993b36d2f67295899d300a02948e20a5083965af2c6e0c2a15bbdf462de3d291a18dba7386be7dae3d4b1d211824920f64a3550bbef3f8164b129967f65592adbb8de6e5f9dd1d03ad45105d9143a2efc62a7a43cd59bae255f579206ee43542f592b6be73ea1cff2e16539bf9e149f0970a83a3c2a1425394b8c91b252847772c34e567a79a78f9a46fc59aac2888928c263550fdc6c8d9f72b664d78566ce4bd4450b7323046a60f29906b10241467118b9789cfdc19ff2036f96dc09689d27403998414df1a06baf83957ebaa94bdcdf258d80d65d10d9ffc37673592f4c084e42cd6642dadfcbf6fd48286565b871237d4b5e500b434c0ba0c28237b45e4f2bc90b1286193654f6c5eb3037ea5cbcda3b220e237ea4954a788709ecf8d3a6ef0ee2508e6519089526ec3731cdff64e5f0cdf11711574ada01e07ec0a1a86b92932dcd18a1ce5cf2e5e2305bf36554ec6a3430685dd64fbc822f32e2b227111ccd75db1e7072c16438af827b8093704f11b09f2a76f26e26761acffe63543f794fcf91b1d9568c703d92cce4135fecdba1f9965a5e5e271daa49c7f0e7f5d63675edc878518d23f66bb58fc065b0e0a4cd82d814e67ef2c841741c0e806ee9e7e5f6e245003fedd1c655d0eaf8b25e2192ab43560fc931e42848232605f132724a3f6c50b01392ccdbb3e8fdb0b064d4f19955d5a22c0281cc74504656a0fbaf314960ca6f6aedcbfa5afa3a5f78fb7b0026ead520501456cb1dfa9ccf1bf7aa86cd5fdcb74170447bbda2753da04b05612ff279530fc3128e183330f65c1667c4de01e48f7f1a02618a6d69883a017988b3f64faddb8432470765d5656d091859999b59b0e7b9406cab6824ed12bab777b03ccbe111ce7f68ab7dbfa49abc4be64a2c77056ac72008879d092f59ae74c9fbaec1333e17a606acf8261eff18cb4a0197783a99228813736df22fe4688ddaa2b3541676dc7b8872a3c314851a0c10b4b179d4e96057f1f11230ad89ef92122221066a397b6a7378b855526b759c881d14ead59a003e4dd30aabbf2ec395c74a1bc8ee4f965931a3394fcc0c84a9d064cc6a30032e9b887d76a19cd7c9a527de37325a616e5d62d65462c786c935135164dc859c0fa7fc39c893d8abeb2d280793acfd814133caff06d1c145fe9dd2d772cd591ef6b06ab68da8e9777f93b3232e0d27db7acad4e3b211c7c755ca749b3a0f75f2d25a2d873f50222247344a57bd1a0e562221d7669860f883f1c999c83ea1e4e9b6e55b9fdd3baf0980ad19e7514dde4034d90077584eb18afc31928714409f9030fd8846f8fb9b63db72ff7a69e54e7a55a4b75656202930f13603b5c123d6d7eb152b0aee346684c42bccafef386c330fd672c1ff8584dd032f51a3e3fa6cf6b9b90d406ccbb53f4727962e777338fcb7aa8805c3f2a1856549738fb26d460246021eb173af00acb1522ca879a2e922cb601fa48bf70076bfbfac0a133762383324b333b15d2515b85bd056a774a5c78027e01f6fde950b1e256c846853c0805e1cf7a3ecc782361ae02738ad14f95b90c334cafce459e526b0dd13fd9d7815977515cf2e119ab34265e16f705a6f9a599d7818140e6c29ccce01aa34646b7eaaadef79dbd601439962e98c3181a1a80c450d9ed0c397c571558b1bcbe0bce852a6537de0d078b2f474e598d6c22c23d277f4fe1c6e58948c350c9ad42adcf7cab2401f7b3332e3f868e64081b245a55743b0a8ca82cf12d0ba65e926f4933353086e1fdb2eef2351cd2b0075273874acb05605667bbace0a81393d96a21c6b84db1de607f3d71a134fec36e3d8d4227dde74b28488341ab8c216ee225e9c498acd6121d52980e018d1d1dd108d70eda2b6ad6b9913b89ab23078f5417d0ea5f5cdfafacb1f0d58a0e57f785d469366d98fc030f3b8d406dfeb54e3a2ed2817f72940ab6c99bc139a4e8f1446480ed672fa5b7a31e59853e855c7563c05f66f3245d730abecba5756f4c5a55721f5acb2659ce64bad1bffd16c3a6c598aa0a86866fb8b47ca4b17692478b918f3bc37b3278a159fa8a7de7d79102f984cc50e8e000f344e4e809fc8d68cb9b4d2810f299218e88073c724ad822124e2669bfc9aa2e38de4799c5fcfeaa1c726f534d80c638fb65e8ca9db64f4543f5114c7697225075ef0f1ef96310a0b9312d51c62003c2174162124d84016f5bd5abab0bf37a8e952e6eb1cf846857206169e819c1ffd9f60b75a06940f7", 0x1000, 0x8001}], 0x10, &(0x7f0000001500)={[{@minixdf}, {@nouser_xattr}, {@bh}, {@nogrpid}, {@auto_da_alloc_val}, {@mblk_io_submit}], [{@measure}, {@uid_lt={'uid<', 0xee00}}, {@seclabel}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ']}[:'}}, {@euid_lt={'euid<', r0}}]})

16:17:57 executing program 2:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=<r0=>0x0)
pidfd_open(r0, 0x0)
r1 = fork()
r2 = syz_open_procfs(r1, &(0x7f0000000000)='environ\x00')
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10000, 0x1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
getpeername$netlink(r3, &(0x7f0000000040), &(0x7f0000000080)=0xc)
readv(r2, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
r4 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r5, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r5, 0xc0bc5310, &(0x7f0000000240))
sendfile(r2, r4, &(0x7f0000000200)=0x933, 0x7)
ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000180)={0x6, "0e6e738762bdebe38b65a37ad01fe54560d17b281ae648653ddbf17e6ab3faeffdd22b1505c4199b43e89324cffa68881b018c1d8e06a799cf4b83bbb70dda84"})

[ 2424.517094] loop3: detected capacity change from 0 to 40
[ 2424.557702] syz-executor.3: attempt to access beyond end of device
[ 2424.557702] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2424.558608] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2424.568420] syz-executor.3: attempt to access beyond end of device
[ 2424.568420] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2424.569346] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2424.589633] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2424.600635] loop5: detected capacity change from 0 to 128
[ 2424.602410] ext3: Unknown parameter 'nouser_xattr'
[ 2424.612481] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2424.617685] loop5: detected capacity change from 0 to 128
[ 2424.625722] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
16:18:10 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

16:18:10 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xf0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:18:10 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:18:10 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x6000000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:18:10 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f00000008c0)={{r3}, "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"})
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)={0x88, 0xffff, 0x7, "6b750e5485f7b0f8f1216c89ddc685acd76129a50e60fef07be14823f9065ddc5d95fee9c412a489ce62f6fdd7b8fbfe9247375ef5ddebf1d103ad1a1d1c3b349898d345d831998f3cd5f5064129971e5b3b82234c7000eea4df5efb3e72780b99bfd349b607a6274aac38a11e5d1ae055f0a87399363c052ab093f8706ac690a23dfe0e4c9b52e9"})
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r4, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0)
pread64(r4, &(0x7f0000000180)=""/219, 0xdb, 0x7)

16:18:10 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
readv(r0, 0x0, 0x0)

16:18:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x11100)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:18:10 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)=ANY=[@ANYBLOB])

[ 2437.772302] loop3: detected capacity change from 0 to 40
[ 2437.793761] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2437.796677] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2437.823867] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2437.837379] syz-executor.3: attempt to access beyond end of device
[ 2437.837379] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2437.838537] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:18:11 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

16:18:11 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x20d, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:18:11 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x12003)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:18:11 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000140)=ANY=[@ANYBLOB="71756f74612c009aa1989bdcdd326e008a4e7715928816b9d31e87f91bf61c836486656811953acd8f6b8372a6bfa3"])

[ 2437.960619] loop3: detected capacity change from 0 to 40
16:18:11 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 2438.014043] syz-executor.3: attempt to access beyond end of device
[ 2438.014043] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2438.015110] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2438.036067] syz-executor.3: attempt to access beyond end of device
[ 2438.036067] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2438.037647] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2438.043348] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2438.059656] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2438.078516] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2450.253217] loop3: detected capacity change from 0 to 40
[ 2450.256512] 9pnet_fd: p9_fd_create_unix (27846): problem connecting socket: ./file0: -111
16:18:23 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x28b, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:18:23 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='qnx6\x00', 0x2046480, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
mount$9p_unix(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=unix,', {[{@access_any}, {@debug={'debug', 0x3d, 0xcff}}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@dfltuid}, {@version_9p2000}, {@nodevmap}, {@cache_loose}], [{@obj_role={'obj_role', 0x3d, 'qnx6\x00'}}, {@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '&{\'\xa9'}}, {@subj_role={'subj_role', 0x3d, '/dev/loop'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@hash}]}})
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000180)=ANY=[@ANYBLOB="3475087870e62b6940e98319841c4517c4f0da54af66db7e3ed977e6fd16096d74f9e505a8d2af18d3899e1772313bd59966bcb4da4efcdffdcd714505baca749051d313657776f90600802e841a3e5b60dedb2bc6e98faa9d1e4a47e1d6a8f968d58512a7afadd0ff210eaecb56d75d20c5d9"])

16:18:23 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x1000000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:18:23 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

16:18:23 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x9, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:18:23 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
r1 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080))
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x20}}, './file0\x00'})
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:18:23 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x14000)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:18:23 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xf000000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2450.264404] ext4: Unknown parameter '4uxp�+i@��E���T�f�~>�w��	mt���үӉ�r1;ՙf���N����qE��t�Q�ewv�'
[ 2450.270949] 9pnet_fd: p9_fd_create_unix (27846): problem connecting socket: ./file0: -111
[ 2450.273109] ext4: Unknown parameter '4uxp�+i@��E���T�f�~>�w��	mt���үӉ�r1;ՙf���N����qE��t�Q�ewv�'
16:18:23 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)={[{@quota}]})
mount(&(0x7f0000000140)=@sg0, &(0x7f0000000180)='.\x00', &(0x7f00000001c0)='adfs\x00', 0x40800, &(0x7f0000000200)='quota')

[ 2450.375498] syz-executor.3: attempt to access beyond end of device
[ 2450.375498] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2450.377141] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:18:23 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0)
pread64(r1, &(0x7f0000000040)=""/190, 0xbe, 0xffffffffffffffff)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
creat(&(0x7f0000000100)='./file0\x00', 0xc2)

16:18:23 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

16:18:23 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0x8000)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
readv(r2, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x100000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@access_any}], [{@smackfsroot}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfsfloor={'smackfsfloor', 0x3d, '[{<)[@'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}})
dup2(0xffffffffffffffff, r2)
pread64(r2, &(0x7f0000000040)=""/184, 0xb8, 0x6)

[ 2450.397599] syz-executor.3: attempt to access beyond end of device
[ 2450.397599] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2450.399293] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2450.403195] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2450.405858] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:18:23 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x300, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:18:23 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {0x0}], 0x2)

16:18:23 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0)
pread64(r1, &(0x7f0000000040)=""/190, 0xbe, 0xffffffffffffffff)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
creat(&(0x7f0000000100)='./file0\x00', 0xc2)

16:18:23 executing program 5:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0x0, 0x3}}, './file0\x00'})
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0)
dup2(r1, r2)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'])

16:18:23 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x14100)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:18:23 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
stat(&(0x7f0000000080)='./file0\x00', 0x0)
setresuid(0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000180)=""/53, 0x35}, {&(0x7f0000000300)=""/179, 0xb3}, {&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f00000003c0)=""/58, 0x3a}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000780)=""/222, 0xde}], 0x8)

[ 2450.558725] loop3: detected capacity change from 0 to 40
[ 2450.584133] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2450.605919] syz-executor.3: attempt to access beyond end of device
[ 2450.605919] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2450.606869] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:18:23 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1) (fail_nth: 1)

16:18:23 executing program 5:
ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f0000000140)={0x6, 0x8})
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, r0, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
fgetxattr(r0, &(0x7f0000000180)=@known='security.selinux\x00', &(0x7f00000001c0)=""/111, 0x6f)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000300)={{r1}, "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"})
ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000240))
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f00000002c0)=ANY=[@ANYBLOB="76186f745d8ce103dd779420362d5711e43ca2ca2c00"])

16:18:23 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {0x0}], 0x2)

[ 2450.695260] FAULT_INJECTION: forcing a failure.
[ 2450.695260] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2450.696080] CPU: 1 PID: 28087 Comm: syz-executor.6 Not tainted 6.2.0-next-20230224 #1
[ 2450.696598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2450.697146] Call Trace:
[ 2450.697326]  <TASK>
[ 2450.697490]  dump_stack_lvl+0xc1/0xf0
[ 2450.697769]  should_fail_ex+0x4b4/0x5b0
[ 2450.698057]  _copy_from_user+0x2e/0x180
[ 2450.698342]  iovec_from_user+0x23e/0x3c0
[ 2450.698637]  __import_iovec+0x68/0x600
[ 2450.698916]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 2450.699273]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2450.699623]  import_iovec+0x87/0xb0
[ 2450.699890]  vfs_readv+0xbb/0x160
[ 2450.700158]  ? __pfx_vfs_readv+0x10/0x10
[ 2450.700445]  ? __mutex_lock+0x224/0x14a0
[ 2450.700744]  ? __pfx_lock_release+0x10/0x10
[ 2450.701053]  ? trace_lock_acquire+0x170/0x1e0
[ 2450.701372]  ? __fdget_pos+0xeb/0x110
[ 2450.701650]  ? __pfx___mutex_lock+0x10/0x10
[ 2450.701958]  ? __pfx___fget_files+0x10/0x10
[ 2450.702266]  ? __fget_files+0x270/0x480
[ 2450.702563]  do_readv+0x133/0x300
[ 2450.702812]  ? __pfx_do_readv+0x10/0x10
[ 2450.703104]  do_syscall_64+0x3f/0x90
[ 2450.703372]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2450.703734] RIP: 0033:0x7fbd353bdb19
[ 2450.703992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2450.705173] RSP: 002b:00007fbd32933188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[ 2450.705682] RAX: ffffffffffffffda RBX: 00007fbd354d0f60 RCX: 00007fbd353bdb19
[ 2450.706164] RDX: 0000000000000001 RSI: 0000000020000880 RDI: 0000000000000003
[ 2450.706659] RBP: 00007fbd329331d0 R08: 0000000000000000 R09: 0000000000000000
[ 2450.707160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2450.707678] R13: 00007ffd56859b5f R14: 00007fbd32933300 R15: 0000000000022000
[ 2450.708189]  </TASK>
[ 2450.716736] ext4: Unknown parameter 'vot]���w� 6-W�<��'
[ 2463.462853] loop3: detected capacity change from 0 to 40
16:18:36 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000001dc0)={&(0x7f0000000240), 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}}, 0x0)
r3 = fcntl$dupfd(r0, 0x406, r0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r4=>0x0})
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x20)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40081)

16:18:36 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x500, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:18:36 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x1e020000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:18:36 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {0x0}], 0x2)

16:18:36 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x18100)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:18:36 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1) (fail_nth: 2)

16:18:36 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 1)

16:18:36 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0)
pread64(r1, &(0x7f0000000040)=""/190, 0xbe, 0xffffffffffffffff)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
creat(&(0x7f0000000100)='./file0\x00', 0xc2)

[ 2463.498086] FAULT_INJECTION: forcing a failure.
[ 2463.498086] name failslab, interval 1, probability 0, space 0, times 0
[ 2463.499810] CPU: 0 PID: 28216 Comm: syz-executor.6 Not tainted 6.2.0-next-20230224 #1
[ 2463.500776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2463.501797] Call Trace:
[ 2463.502137]  <TASK>
[ 2463.502446]  dump_stack_lvl+0xc1/0xf0
[ 2463.502948]  should_fail_ex+0x4b4/0x5b0
[ 2463.503475]  ? kvmalloc_node+0xaa/0x200
[ 2463.504007]  should_failslab+0x9/0x20
[ 2463.504502]  __kmem_cache_alloc_node+0x5b/0x310
[ 2463.505107]  ? kvmalloc_node+0xaa/0x200
[ 2463.505640]  ? register_lock_class+0xbd/0x1890
[ 2463.506248]  ? kvmalloc_node+0xaa/0x200
[ 2463.506766]  __kmalloc_node+0x45/0xb0
[ 2463.507270]  kvmalloc_node+0xaa/0x200
[ 2463.507790]  seq_read_iter+0x820/0x1300
[ 2463.508328]  ? find_held_lock+0x2c/0x110
[ 2463.508870]  ? lock_release+0x1e3/0x710
[ 2463.509407]  seq_read+0x171/0x210
[ 2463.509909]  ? __pfx_seq_read+0x10/0x10
[ 2463.510469]  ? inode_security+0x105/0x140
[ 2463.511027]  ? security_file_permission+0xb5/0xe0
[ 2463.511684]  do_iter_read+0x4f1/0x750
[ 2463.512191]  ? import_iovec+0x87/0xb0
[ 2463.512718]  vfs_readv+0xe5/0x160
[ 2463.513116] syz-executor.3: attempt to access beyond end of device
[ 2463.513116] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2463.513177]  ? __pfx_vfs_readv+0x10/0x10
[ 2463.513986] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2463.514418]  ? __mutex_lock+0x224/0x14a0
[ 2463.515452]  ? __pfx_lock_release+0x10/0x10
[ 2463.516044]  ? __pfx___mutex_lock+0x10/0x10
[ 2463.516604]  ? __pfx___fget_files+0x10/0x10
[ 2463.517183]  ? __fget_files+0x270/0x480
[ 2463.517727]  do_readv+0x133/0x300
[ 2463.518213]  ? __pfx_do_readv+0x10/0x10
[ 2463.518745]  do_syscall_64+0x3f/0x90
[ 2463.519242]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2463.519912] RIP: 0033:0x7fbd353bdb19
[ 2463.520379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2463.521002] syz-executor.3: attempt to access beyond end of device
[ 2463.521002] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2463.522536] RSP: 002b:00007fbd32933188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[ 2463.522569] RAX: ffffffffffffffda RBX: 00007fbd354d0f60 RCX: 00007fbd353bdb19
[ 2463.523359] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2463.524221] RDX: 0000000000000001 RSI: 0000000020000880 RDI: 0000000000000003
[ 2463.526512] RBP: 00007fbd329331d0 R08: 0000000000000000 R09: 0000000000000000
[ 2463.527388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2463.528268] R13: 00007ffd56859b5f R14: 00007fbd32933300 R15: 0000000000022000
[ 2463.529155]  </TASK>
[ 2463.536117] FAULT_INJECTION: forcing a failure.
[ 2463.536117] name failslab, interval 1, probability 0, space 0, times 0
[ 2463.537532] CPU: 0 PID: 28213 Comm: syz-executor.5 Not tainted 6.2.0-next-20230224 #1
[ 2463.538529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2463.539536] Call Trace:
[ 2463.539875]  <TASK>
[ 2463.540167]  dump_stack_lvl+0xc1/0xf0
[ 2463.540650]  should_fail_ex+0x4b4/0x5b0
[ 2463.541162]  ? getname_flags.part.0+0x50/0x4f0
[ 2463.541766]  should_failslab+0x9/0x20
[ 2463.542253]  kmem_cache_alloc+0x5a/0x320
[ 2463.542776]  ? fput+0x2f/0x1a0
[ 2463.543208]  getname_flags.part.0+0x50/0x4f0
[ 2463.543822]  __x64_sys_mkdir+0xde/0x150
[ 2463.544357]  do_syscall_64+0x3f/0x90
[ 2463.544847]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2463.545489] RIP: 0033:0x7f4a073ddc27
[ 2463.545969] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2463.548167] RSP: 002b:00007f4a04953fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 2463.549083] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a073ddc27
[ 2463.549943] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080
[ 2463.550819] RBP: 00007f4a04954040 R08: 0000000000000000 R09: 00000000000000ae
[ 2463.551683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000280
[ 2463.552546] R13: 0000000020000080 R14: 00007f4a04954000 R15: 0000000020000100
[ 2463.553443]  </TASK>
16:18:36 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x600, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2463.595363] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:18:49 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r0, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
pread64(r0, &(0x7f0000000040)=""/190, 0xbe, 0xffffffffffffffff)
creat(&(0x7f0000000100)='./file0\x00', 0xc2)

16:18:49 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x67000000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:18:49 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 2)

16:18:49 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

16:18:49 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x1ff00)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:18:49 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1) (fail_nth: 3)

16:18:49 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x9)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendfile(0xffffffffffffffff, r2, &(0x7f0000000040), 0x200)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0)
fcntl$setflags(r1, 0x2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000100)={'xfrm0\x00'})

16:18:49 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x700, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2476.140675] loop3: detected capacity change from 0 to 40
16:18:49 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r0, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0xc2)

16:18:49 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

[ 2476.195875] syz-executor.3: attempt to access beyond end of device
[ 2476.195875] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2476.196722] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2476.223375] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:18:49 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1) (fail_nth: 4)

16:18:49 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040))
sendfile(r2, r0, &(0x7f00000000c0)=0x8000, 0x1f)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:18:49 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x900, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:18:49 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r0, 0x9)
creat(&(0x7f0000000100)='./file0\x00', 0xc2)

[ 2476.283443] loop3: detected capacity change from 0 to 40
16:18:49 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

[ 2476.336010] syz-executor.3: attempt to access beyond end of device
[ 2476.336010] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2476.336886] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:18:49 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 3)

[ 2476.375472] FAULT_INJECTION: forcing a failure.
[ 2476.375472] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2476.377041] CPU: 0 PID: 28522 Comm: syz-executor.6 Not tainted 6.2.0-next-20230224 #1
[ 2476.378043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2476.379065] Call Trace:
[ 2476.379422]  <TASK>
[ 2476.379728]  dump_stack_lvl+0xc1/0xf0
[ 2476.380309]  should_fail_ex+0x4b4/0x5b0
[ 2476.380875]  copyout+0x19/0x120
[ 2476.381357]  _copy_to_iter+0x5cc/0x13f0
[ 2476.381931]  ? __pfx_do_task_stat+0x10/0x10
[ 2476.382531]  ? __pfx__copy_to_iter+0x10/0x10
[ 2476.383159]  ? lock_is_held_type+0x9f/0x120
[ 2476.383776]  ? __virt_addr_valid+0x102/0x340
[ 2476.384402]  ? __check_object_size+0x3e4/0x860
[ 2476.385067]  seq_read_iter+0xdb2/0x1300
[ 2476.385667]  seq_read+0x171/0x210
[ 2476.386189]  ? __pfx_seq_read+0x10/0x10
[ 2476.386770]  ? inode_security+0x105/0x140
[ 2476.387369]  ? security_file_permission+0xb5/0xe0
[ 2476.388071]  do_iter_read+0x4f1/0x750
[ 2476.388626]  ? import_iovec+0x87/0xb0
[ 2476.389172]  vfs_readv+0xe5/0x160
[ 2476.389670]  ? __pfx_vfs_readv+0x10/0x10
[ 2476.390247]  ? __mutex_lock+0x224/0x14a0
[ 2476.390846]  ? __pfx_lock_release+0x10/0x10
[ 2476.391480]  ? __pfx___mutex_lock+0x10/0x10
[ 2476.392119]  ? __pfx___fget_files+0x10/0x10
[ 2476.392739]  ? __fget_files+0x270/0x480
[ 2476.393334]  do_readv+0x133/0x300
[ 2476.393844]  ? __pfx_do_readv+0x10/0x10
[ 2476.394439]  do_syscall_64+0x3f/0x90
[ 2476.394971]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2476.395691] RIP: 0033:0x7fbd353bdb19
[ 2476.396228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2476.398649] RSP: 002b:00007fbd32933188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[ 2476.399678] RAX: ffffffffffffffda RBX: 00007fbd354d0f60 RCX: 00007fbd353bdb19
[ 2476.399998] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2476.400628] RDX: 0000000000000001 RSI: 0000000020000880 RDI: 0000000000000003
[ 2476.400650] RBP: 00007fbd329331d0 R08: 0000000000000000 R09: 0000000000000000
[ 2476.403167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2476.404149] R13: 00007ffd56859b5f R14: 00007fbd32933300 R15: 0000000000022000
[ 2476.405136]  </TASK>
16:19:01 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

16:19:01 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:19:01 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x9effffff, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:19:01 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xd02, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:19:01 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 4)

16:19:01 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
r1 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x900)
r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x200800, 0x2)
recvfrom(r2, &(0x7f00000008c0)=""/4096, 0x1000, 0x40000000, 0x0, 0x0)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:19:01 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1) (fail_nth: 5)

16:19:01 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0xc2)

[ 2488.597643] loop3: detected capacity change from 0 to 40
[ 2488.602145] FAULT_INJECTION: forcing a failure.
[ 2488.602145] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2488.603079] CPU: 1 PID: 28687 Comm: syz-executor.6 Not tainted 6.2.0-next-20230224 #1
[ 2488.603608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2488.604155] Call Trace:
[ 2488.604333]  <TASK>
[ 2488.604493]  dump_stack_lvl+0xc1/0xf0
[ 2488.604775]  should_fail_ex+0x4b4/0x5b0
[ 2488.605063]  _copy_to_user+0x2e/0x150
[ 2488.605337]  simple_read_from_buffer+0xd0/0x170
[ 2488.605667]  proc_fail_nth_read+0x19c/0x230
[ 2488.605976]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2488.606312]  ? security_file_permission+0xb5/0xe0
[ 2488.606661]  vfs_read+0x257/0x940
[ 2488.606934]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2488.607275]  ? __pfx_vfs_read+0x10/0x10
[ 2488.607578]  ? __pfx___fget_files+0x10/0x10
[ 2488.607906]  ? __fget_files+0x270/0x480
[ 2488.608228]  ksys_read+0x12b/0x260
[ 2488.608496]  ? __pfx_ksys_read+0x10/0x10
[ 2488.608815]  do_syscall_64+0x3f/0x90
[ 2488.609078]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2488.609464] RIP: 0033:0x7fbd3537069c
[ 2488.609727] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2488.611002] RSP: 002b:00007fbd32933170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2488.611544] RAX: ffffffffffffffda RBX: 00000000000000b3 RCX: 00007fbd3537069c
[ 2488.612071] RDX: 000000000000000f RSI: 00007fbd329331e0 RDI: 0000000000000004
[ 2488.612576] RBP: 00007fbd329331d0 R08: 0000000000000000 R09: 0000000000000000
[ 2488.613083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2488.613602] R13: 00007ffd56859b5f R14: 00007fbd32933300 R15: 0000000000022000
[ 2488.614121]  </TASK>
16:19:01 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
creat(&(0x7f0000000100)='./file0\x00', 0xc2)

[ 2488.669673] syz-executor.3: attempt to access beyond end of device
[ 2488.669673] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2488.670533] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:19:01 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

16:19:01 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 5)

16:19:01 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x80600, 0x0)

16:19:01 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x80, 0x4)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10400, 0x1c0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:19:01 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xc2)

16:19:01 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xf00, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:19:02 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000001dc0)={&(0x7f0000000240), 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}}, 0x0)
r3 = fcntl$dupfd(r0, 0x406, r0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r4=>0x0})
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x20)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40081)

16:19:02 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0x7ffff000}], 0x1)

16:19:02 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x0)
r2 = pidfd_open(0x0, 0x0)
r3 = epoll_create(0x8)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='fdinfo/3\x00')
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0xb430f1c22ae7977a, 0x0)
r6 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/oops_count', 0x400400, 0x4)
dup3(r1, r1, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r7, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
r8 = syz_mount_image$nfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2, 0x4, &(0x7f0000001a00)=[{&(0x7f0000000780)="ac6354c4f233529c0fe19bc930f0915b599e6cce4ac22171303f", 0x1a, 0x4}, {&(0x7f00000008c0)="d6161481b74bf4f3f816ba9986ed1d703978984074d34a05494a2623972f04b09fb66a63045e9fa9c2b1f8a764465dae36f30e5262a7e48ba6271b49baf9160d7c090e097f9bd7df7058fa56a28e81c8339fb195c46f2f6a9a7dd6528f01e2cd9ce9967e16cc2fa890f517cb951cfb443066a3a3729850", 0x77, 0x8001}, {&(0x7f0000000940)="be6643a32553aa3839f56bb616c108a6f3cb29b460fa4f239c5285f0171f909ec6d14ba63e0a8d6112f67e730e8c93b9a224c8d392e8a218f4d90df781cea3b2f754ca2dd8b0519291e9761a625abd948939df1c5a70ed28e0a5db936a12baab1a5ce9fc7baa15fad0d927047ed8638f84c20128e5fce3fece1c8831945b9581b868286d13", 0x85, 0x2}, {&(0x7f0000000a00)="6c9855a19524351b386d681ab51f744f6e607881c1f4618a7d9cea155b242024336a2d031bd70ae5cbc1970b7cc1fd78114087c938316ddff44ff116edcc42e6944c391278c4ed50bbb66b0e6b0527b772ac779826b73f274ee5a4230c6f6d200311d243ff55a7648135596c87245a00465c5c59772ac179d8852237946915ee88205bb896573e15e03b22216b7670bec2de8535d1cd222f6356e518e3c9e314b57c6ba1a8f322b872cab1b20f0b8181296600f3b58ce74d9bc56523191bba5a180f6ee35535fad6e7597dfa2180999ac6b444988f39445b28c59db2791456e85bf28ef29628b6566ac11ce951f6203d41e46614db7baeb2d721a16bf977ec8da009606a9a0ae75f93595bbd7a5ae6c234f75c8b6f183078107a79675d65bacce1b0540fab0ae901048167fe025d4a34344d169058dfca3d3768d078a645f1ed0a6d992636067b3000667f3082eafbf33c81c30f288c46a49bb0aa6324259fada4901db011bef7b4fb98ebed6e3393045007c172fa69b9abc220de1b1e80ccbf46a30a934d857c2321bd10c95fafb3cfe89f2dd7c1a460beb1b71b927966cc124d44a7b9d48362e79f93c17f96ba1c7215974a078a3f713884a17242a726d6179d25aa305a592f59e6ebcec8ad3222fa1ef2952c4a98d9202a9292b7ef8c37af5ccf5a3863b8eda45578e83a05ff046d08eb9154c4e2cff460f7222ee0d06a2ec9d59d0938a44f409b793a9544076f6e5b43bb58be6438bf0fe4ebeda7f174491df28be5c54e348be8fea3590c38f925df9b5b6f6c940665ac1a7c38d82a61c80c97dd9a535907af3a1a679f952f7786489fee528e5e748f7066900001e6aa688b912359335ea77e1203cb5f8399750d0d1d12dea573487451e6ae46118f57c76e7d0bdd49044e846c592c5bdc1bf9ddffce6c43c4bb64717212d3fd95a296471b22b1a69caff41c751cc58698a11d3fbfc5dccd7014abb1cc43b7cdef03db1f84e8db495d31a3f26dde0efa6602261c73fa7f225a1bd208de09236331c220ab1a7aab2b8388adba5c4cb4fe2d604bf98de1042c0586e851fa3a91cc04e913b9ea738d3a48e69a41be12a9313961519494c9c9539520f2ea06019d53b1fe61877eca27118eb93a1f198dde0c6d408c3bfd628a1b1f0aa95d5086b11c6d632155186d8ef19822ea7026c803cd2ef867a3ac72abb816010cded1db85601681bc178fa90a895c76bd07e8cc240a5be8a8df60e71d927164d6b8f98b6a28c53e6656be622cbde88f744df6b9e4b1a35cc38b14850e63bc134285ed3dd2d3a1ce09034b99f4a24a40eb65d8f24255e89195d3c9de32da32e25490cc1f7feaac374ec1cfdc75ed8c67c9a649b831250182082b27465ad6b316dd66134cf92d7b32c16dc07e8dcca7d63ef3c6efd38312e591094b48516cd0e4475e7177df2d64f972993e359ad8b0676d88e4bbba2786215b2951357b1879b91e1fe3315451581079eeba3ff923acc579d8d6d4c94b85d4f9807a13f771a968da64b1ab44ce99a5efe80a589aeed30caeffd538c1b71b71d02941a9c252d467164b6849f6e39d99263179497ce45d6541a8580b71ca6785f0185b4b02c8ed9435cdebd3b9cbfbcf31c6d1eccde3e0a6efbfb79de47761bf6345f21ad19851eff4216772f1bcdc0525d023f11f61bdc3c37ca054dc6702185552a339eb8301becf5ccc68f3433b93f92165ed386538d9616693977f038322455cdee2bb1b61d4db1a8cf8fe43b5584976a93223a4da029b49bf3fa7d6487410c03b2dc152870c48b00599ed6925a92cac2bfdeeed1cc500bc7b37fe77cf8238325e1a020bec5c183acc9b89aa2b6141e0112c7ed84a1dab8cfdf12bba537f2cece93961533e7ece58e2f938fb0da67f14fa253e7bf9572236b166aa712ee59f7dca0e859f75bc5ea93a6704c5a02f2bbb9dcfe30a386ea9d55d117b3045ef2ebbfa429d1104505048a9f65f22c9c90d6ee2825c908228b44f5acae0270b870a2f285c07eced8a033f4668b952da82147cb3800b69bb3b601ae96b3f20b444a9d143cfaa3663caa2945826b4f3e9be2fe5fbadc248fabfc6b828f0734e2ce4725a09827fa9c90f925bf1febf4541ea7903bf0b9fa4aad522d2d471aaa29f78e45efbb796dfb81d888887921248a452785b5a30d00b92737120a348efd6faba7cf68b5dd721cf7055ccdcfb21abaf1d44080fd4088e72b50262f2fdc18b2c338d68266c0232ef2784bed8f61ea7ec14eced6b7605092a7c719447b57d4be09fb0ca5c4b920f5f40b693ae90930e6ba17eddb265e73606e3444265f48e8be6fc597cf018e75dc4568d8c06b262d340bedee8fbf46549d77e29261d7341e5f6c24a8881d9f306f95c8c66fb9e997accfb701588c34adbf99c89d978071fd5c3abac562576d2e0d0d287c864e04eddb9db75231bbfb3089ba572fba0c9f01c79d9d78b30fe76b0dd2f8db28be2bc6e1e5dab4346d666604fb9ce49f8d6752005a52f6b1d90a4f0939ef68944c52e86a8c44908501b1953a37b9a28dc64f91461faa41b9545b4d2ca62cf3d89968c2b69f4dbe1e3c3c310fb31d6e9635bfea5cdf47a22ebcaef69634ed08f5bf14076e376aa369a4a10dd348a7143fe80cd671cfdd5281a2cc98d15732d772d351ea2f40d4cdcc84b39aed460fd32caac076291a4d3dcf8b570d4921f1e10deee9fbaec27dc6aa96ff1327a6fe28b7d326cb6526dabc7215c48a4c7a5d60b20556e4f8c75d644adc054ed5e1b923ecca510c75f6c793a240e62c0975745c4407dccc005ee66492508800a4e79a7e4dadf1094cde7977065b8d0b859ebed1cf1ffebbae68748b90d8d8ef8d8927ee77c6c09c8f6298dd39f4dc353ea53f814b2b1284fa31921e3eb29fa5f2cf4b9e0f484e6e3ca52968cd7fb527d1e4610f34f9157e3d390df9fc9588eae91901af72efce5b810db4ee564636d8d1f8d8cc8e823a1408f47f7392e8a6e993f8520a5010594e0efc8d5a6ee3129c8fbbd13f8d510c972b994582f59eb385c008693d0c01d0b185d7104d73aa06c091e292dd92dec58b680d5ade2b00044e28a9581110ea07acbee7a8f03d7aba1e059fe2ebb829cd959ca3f5a163e2766722039391ec19da04fee3c4033903fcfb42e14af41ce60b47b69de492b9f0b4469a3dc9aaab8cf08b3bc5e6b57620d654460dc06ad963db35152abd09264cb02a83682120a8f33e4e17c300fc9920093875465f8798616e6d6c4663e1597ea28bcf0742d711cd287ecfb4f704759bd09cb31b3bd1ec14361a0bf4075b24b8b04ed229041b0bc40aed1bcaa1c109d3f086bde1e43a6d9eb6b0316bb1f94bbcbc3bd47eed7849e5d44a6e5bfb215cad27b0238360f646b308b3da438d026c20884cd4495e6ef5ccf252a6c5db0ed750dbd02becfc41c664c48740d3953e79bfeb0673af51391352b9126abfaf898ada06aa7305a25dc034f165d4298b02a4de789d66bcb422d3c4f03f5569f67754307b57be64db16753df3f945c3a19097fcaeda3142b467aedd6c3451f3cbb41e10fdfd689c2ed7999578af5da98c914c6533fe0b4436883e003f305befe72f2efac6fc94d0d8e325ffd8271575375bc8ae7eef2a3e7a3c51f97dd46423da16223f9abc01435386eeee8928cdb6199964fdac85845d99897fdd2d72f8856b0db6b1c445dd90fac33b0a8fa94580464299d2c37e0fd5d06c013e3b4612ca38fbfe27f1eae113f038936c7ade7c007a29e3ec431a7f7f21603e85113568f3bc4a7211485a21355883581b4b2f9bb4bfd794503bc4e93d9c7f3194c04584f5b1eb74a098cd0f5c6befbb4d66b216da23426221b39a92d51ff26e2972f0625183f9f5b77b084947ec3183e05c2bd8aafcfc1607b63b502791d71845ef89d06601253a9ecd30ccd41047466468d441acd1f6b4225f2696c0ad3fb191323786f6a9ba0bf683499dfe3ffea20ba5dbd451915b119551f9003862b4fcfff4d71ad988706fc5a9b1c0752287225d31247258b69406e68634e9cafe0f13df79b4eeb46b9fca3b51e29354b872fd5b0232ada58e914a76dc47ae0eb193c66958a77c568cef62a31b48c46f6d68cd6fab978c86bb926aa0a3b0e223eb01f5bbeb3a837304efc5b488f635bb410d7474af1d29605ed10332502a733550645752f856fa4d75b9bb84e6f9a6dd780a1df844f1a136ef0d9820ec6d3becc4a5d59f87c51e120b8fef89d1e72e03cb56a566dd4d43ef53e01a7e044f4197a6e20e863302e1a3a9c44cf1d7e2285c69684bdccd205d65948ae5159540d02e0d239a0f86c383f1265cc0caccd22c491e7d64b307166112094e987493f9f6422103b3a23afb45dad8e58b8cfd105ddb4ee7e2e0f94a9acc6a107d1e9feaf474dcc1648e9183283e0cc4a504d3fec1189287949c8ec76e7b45a7f4fe396d36c9dcf6732c8b6e1294d4ad9c1173711876e1e793ae906e2ca3b2559de18235774e9bbf624b440fbb56acedd1f55ca50445bac9f08ed4b8e0ad1c79ed624a0d53cf34c0ea91e79792946e0582c7783dbb7e088b6ed70c4de740900f9c8f02e6cf77397938493e67cbea22ed258a1bcd712c155812406e03d5884bef6c32a451564f6409ebc6ac3630f039d5f152d835849a2afefd59a5dec7a17b4e2478b6c12fc4dbab0d0c2252261f41193b7dd2a49d4c1dc87100c1ad9db733987e84556fb73c3b8c96d7a37967e50bff06038cdd31d283b4e41fce03a632c6eeed41c84d37ffb2673dc27ac9a0abf1a4af3a4f6ccf14cc2335dd62d33ffa24c0e7042b7abf7e485428d6d405ce083541ae8837c76b66c87ef218f86fcfb3efe642fe1a73b98b3beed78875ab47a524121b379342aaa9d5ce1c936fb65861faa3c4583a46700244dea96a43c36d5c3cd6a53f44dd520c32221becd4954d2135b88c6f1f263c7d01cef4c78e7894742002b2b7c7c7463ce006d8d3e0cafe877c9d8dd94b0df15c3e0b13fd7af176ea7801a3f538ea0ca75ce87e9ad3d5a68fc14d18517d4b7ad4fe7251f5b0a02c3d6b36d30b626d9ea7cee993420dc389151ce94a17eb1e8161f1e357f8c5dfbf99372312506b83637292e0f37424e768cbd5167d0a42ce74e8c4923b2722afb7500703d0b533f0a991680e340af2c82f3526d6ca447b2f9acc485622bc90e6c46646f58bb3e657b3cdfbad073fed4517c756cdc632823e198c7a8c113d143e3a98997b73300e785ef8731edfd0d30067b1c59130bb2297c7877b4a4cae2697e46536afb8a856fb5f1289e96b2821a23ea2f431c4eeac8ba73f02b55ea75af72a11ded1d9ffd037ad2e54a56d8525ab2c56d9cde434ed4f15e1ec42421ce39c219b655e92da8e5f53ac263e99e8a66bae93545563edf28ca94178378a6632767a14955414809f38c973606d596e33a7e0bc4d07b5d5f231d4d8110732d1b9d9adbbf2427365e55c3aa6ba0423b60cab67fb88a355c6a1c1d2c78c8ea79fba65e792a1d679553fd768afd7b1ebe105ea51329e2b7c978663c5754c751a665d28e7705e6244ace9186ba884b956e46a3eae07fec579e1139d93ff4a9284baa9552a13c65cc1431fb4109d315e9bef40ba71018786cd3b8d4668116fa0e14a9a73bc595674db7027e1ac83aaa117bf81569219262da3d41306699766b2b04f2dffba73f4a2ca0ca607f26fadf4ce57071aab09f811dfe47389c2d90d3c2de3307d504078f4f5778797e8eba008e5b1c34c0e1c4f39b6cd10fe51987acf98ddbc03b7db6a0984b8bb5488eb6394245efb7fa7afdd11b", 0x1000, 0xfffffffffffff95d}], 0x220006, &(0x7f0000001a80)={[{'(##'}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}]})
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r9, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
io_submit(0x0, 0x5, &(0x7f00000001c0)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x6, 0xfff7, r2, &(0x7f0000000080)="b66738e3d263347a21eff7163705215a5a7f9f3214bf6db2cfa42b2879df3638e36f0f8967f2241468eb422f981ddf7bcb7328d039d66be595066aa3f8a3e50dddd37c3e70a08e8659305eda9278bba2d2170ec7602215225883315c43cea01c10775bbc657e34dee0d9cb3b079b7a55a6b2452822b6866dbdc65087572671baeabe9b651124a24259bda0aed9d76c947530a38ce6f39f1e401085f0b1cb9d15a796d4d1d9db839051a8adbf706a046772ecafc407a81f164f545a121b824663f94d6dd215ec9af1be1e814e5f789f6859a80c793b27f14bd2f613ca3c0121dc924a45278eb466daef4b42eca2986d5fd3f5b8490f627b79", 0xf8, 0x4}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0xe43, r3, &(0x7f0000001ac0)="6042fb3944ef143d1cc380dc673bfd70102b2c70d3c186ddb51b82006a36ef7cb32f76f68e97e93b2b0fb6c3521c434e0814eb6d1232e758844e85407495e1e84a094611a2e86a33c0a186a2f5e1f7753d9eba16dac2a7eed4f9791d4a349ab2c5c0011d4ee97b35fddb48ea07c367d96b31709eb3b53b5843f33659375322d7005c3c50b0d0081208e50c3ae87be96abd597b8160dc65a24496485cc5adbad2b270afc36eb78fec3a85e2d641bc1764bfdc0bb5", 0xb4, 0x200, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x1f, r4, &(0x7f00000003c0)="40240697ba09dc04d4c3c4fb33f85acac41d2ff7550ff880d7516c2338c2419c100e074932adaa1a6fe76f8cd68136c56f61f9af16f5b469dde830a79dd52c1cf071373e31f06ce86383c91884b0c14c1cfe9031bf792f4ac03a556309b17523251e36864a5ede92f10ca2d44a16babcb8c8a6306bab18ee6c64a090421b7ef22d5356472109715474d79d86ea4c0ee0f90de2098d6432cfa53bcd9076bab50c68c1ddf17167607c503f4e7130f4acf8d179", 0xb2, 0xdf, 0x0, 0x3, r5}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x5, r0, &(0x7f0000000500)="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", 0xff, 0x9, 0x0, 0x2, r9}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x5, r8, &(0x7f0000000680)="67aa9003f4c64fbc01c49db1f6b982731a1a06cd216d239a24e2cc964fe6cc9f3b0e25693d84498ea383911a541fdf8d1ad25856fb588e61eeedf26b1a4a074bf343ec69f3dbae341b1d13695a8a13251bd173c2be4b8ec3dee7a03da75d9e1a1dfad2b0c44362d4de4c8aaace417c1e46659ba15edba8032d50ceb56a4f46090579e155824e5312061f76606d879d600dac5c85765700d5880b9a", 0x9b, 0x6, 0x0, 0x2, r7}])
sendfile(r1, r0, &(0x7f0000000000)=0x200, 0xc)

[ 2488.864943] loop3: detected capacity change from 0 to 40
[ 2488.891347] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2488.983533] loop2: detected capacity change from 0 to 16377
16:19:15 executing program 2:
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000040))
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/217, 0xd9}], 0x1)

16:19:15 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x8b02, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:19:15 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0x1ff}}, './file1\x00'})
mknodat$null(r1, &(0x7f00000001c0)='./file2\x00', 0x800, 0x103)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r3 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x80000, 0x2)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
chdir(&(0x7f0000000040)='./file2\x00')
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r4, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
fcntl$notify(r4, 0x402, 0x38)
sendfile(r3, r2, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:19:15 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xf0ffffff, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:19:15 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 6)

16:19:15 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000001dc0)={&(0x7f0000000240), 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}}, 0x0)
r3 = fcntl$dupfd(r0, 0x406, r0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r4=>0x0})
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x20)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40081)

16:19:15 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0x7ffffffff000}], 0x1)

[ 2502.108305] loop3: detected capacity change from 0 to 40
16:19:15 executing program 1:
creat(0x0, 0xc2)

[ 2502.126526] FAULT_INJECTION: forcing a failure.
[ 2502.126526] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2502.127408] CPU: 1 PID: 29138 Comm: syz-executor.5 Not tainted 6.2.0-next-20230224 #1
[ 2502.127927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2502.128483] Call Trace:
[ 2502.128660]  <TASK>
[ 2502.128823]  dump_stack_lvl+0xc1/0xf0
[ 2502.129090]  should_fail_ex+0x4b4/0x5b0
[ 2502.129383]  _copy_from_user+0x2e/0x180
[ 2502.129662]  memdup_user+0x72/0xd0
[ 2502.129912]  strndup_user+0x78/0xe0
[ 2502.130173]  __x64_sys_mount+0x137/0x310
[ 2502.130469]  ? __pfx___x64_sys_mount+0x10/0x10
[ 2502.130800]  do_syscall_64+0x3f/0x90
[ 2502.131061]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2502.131410] RIP: 0033:0x7f4a073e004a
[ 2502.131680] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2502.132868] RSP: 002b:00007f4a04953fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 2502.133383] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a073e004a
[ 2502.133849] RDX: 0000000020000280 RSI: 0000000020000080 RDI: 0000000000000000
[ 2502.134325] RBP: 00007f4a04954040 R08: 00007f4a04954040 R09: 0000000020000280
[ 2502.134797] R10: 00000000000000ae R11: 0000000000000206 R12: 0000000020000280
[ 2502.135268] R13: 0000000020000080 R14: 00007f4a04954000 R15: 0000000020000100
[ 2502.135748]  </TASK>
16:19:15 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:19:15 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xf000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:19:15 executing program 1:
creat(0x0, 0xc2)

16:19:15 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 7)

16:19:15 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x3)

16:19:15 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000001dc0)={&(0x7f0000000240), 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}}, 0x0)
r3 = fcntl$dupfd(r0, 0x406, r0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r4=>0x0})
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x20)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40081)

16:19:15 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x30000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:19:15 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:19:15 executing program 1:
creat(0x0, 0xc2)

[ 2502.354131] FAULT_INJECTION: forcing a failure.
[ 2502.354131] name failslab, interval 1, probability 0, space 0, times 0
[ 2502.355148] CPU: 1 PID: 29257 Comm: syz-executor.5 Not tainted 6.2.0-next-20230224 #1
[ 2502.355710] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2502.356276] Call Trace:
[ 2502.356469]  <TASK>
[ 2502.356635]  dump_stack_lvl+0xc1/0xf0
[ 2502.356926]  should_fail_ex+0x4b4/0x5b0
[ 2502.357230]  should_failslab+0x9/0x20
[ 2502.357519]  __kmem_cache_alloc_node+0x5b/0x310
[ 2502.357865]  ? copy_mount_options+0x55/0x180
[ 2502.358204]  kmalloc_trace+0x26/0x120
[ 2502.358482]  copy_mount_options+0x55/0x180
[ 2502.358806]  __x64_sys_mount+0x1ac/0x310
[ 2502.359116]  ? __pfx___x64_sys_mount+0x10/0x10
[ 2502.359468]  do_syscall_64+0x3f/0x90
[ 2502.359743]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2502.360115] RIP: 0033:0x7f4a073e004a
[ 2502.360391] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2502.361655] RSP: 002b:00007f4a04953fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 2502.362188] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a073e004a
[ 2502.362698] RDX: 0000000020000280 RSI: 0000000020000080 RDI: 0000000000000000
[ 2502.363199] RBP: 00007f4a04954040 R08: 00007f4a04954040 R09: 0000000020000280
[ 2502.363710] R10: 00000000000000ae R11: 0000000000000206 R12: 0000000020000280
[ 2502.364230] R13: 0000000020000080 R14: 00007f4a04954000 R15: 0000000020000100
[ 2502.364752]  </TASK>
16:19:27 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x34000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:19:27 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x4)

16:19:27 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
readv(r0, &(0x7f0000000040), 0x0)

16:19:27 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xfffff000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:19:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x6)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:19:27 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 8)

16:19:27 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000001dc0)={&(0x7f0000000240), 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}}, 0x0)
fcntl$dupfd(r0, 0x406, r0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00'})
creat(&(0x7f00000000c0)='./file0\x00', 0x20)

16:19:27 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0)

[ 2514.728173] loop3: detected capacity change from 0 to 40
[ 2514.760757] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:19:28 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
pread64(r0, &(0x7f0000000040)=""/46, 0x2e, 0x7fffffff)

16:19:28 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x5)

[ 2514.820288] syz-executor.3: attempt to access beyond end of device
[ 2514.820288] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2514.821971] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:19:28 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000001dc0)={&(0x7f0000000240), 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}}, 0x0)
fcntl$dupfd(r0, 0x406, r0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00'})

16:19:28 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 9)

[ 2514.875092] syz-executor.3: attempt to access beyond end of device
[ 2514.875092] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2514.876706] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:19:28 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x80000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:19:28 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121002, 0x2)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x43)
sendfile(r2, r1, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[ 2514.981786] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:19:28 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x6)

16:19:28 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000001dc0)={&(0x7f0000000240), 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}}, 0x0)
fcntl$dupfd(r0, 0x406, r0)

[ 2515.058599] loop3: detected capacity change from 0 to 40
16:19:40 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 10)

16:19:40 executing program 2:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=<r0=>0x0)
pidfd_open(r0, 0x0)
fork()
r1 = fork()
r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/mcfilter6\x00')
read$hiddev(r2, &(0x7f0000000040)=""/16, 0x10)
readv(r2, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:19:40 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xffffff7f, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:19:40 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000012c0)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
openat(r1, &(0x7f0000000180)='./file1\x00', 0x8100, 0x1)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r0, {0xbe1b}}, './file0\x00'})
sendfile(r2, r0, 0x0, 0x10001)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000001280))
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r5, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x810e5e2da460dd13)
ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000280)={{r3}, "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"})
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0})
setresuid(0x0, r7, 0x0)
fchownat(r5, &(0x7f00000001c0)='./file1\x00', 0x0, r8, 0x400)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:19:40 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x400300, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:19:40 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x7)

16:19:40 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000001dc0)={&(0x7f0000000240), 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}}, 0x0)

16:19:40 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 1)

[ 2527.783562] loop3: detected capacity change from 0 to 40
[ 2527.811139] FAULT_INJECTION: forcing a failure.
[ 2527.811139] name failslab, interval 1, probability 0, space 0, times 0
[ 2527.811980] CPU: 1 PID: 29634 Comm: syz-executor.5 Not tainted 6.2.0-next-20230224 #1
[ 2527.812519] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2527.813061] Call Trace:
[ 2527.813242]  <TASK>
[ 2527.813401]  dump_stack_lvl+0xc1/0xf0
[ 2527.813676]  should_fail_ex+0x4b4/0x5b0
[ 2527.813966]  ? getname_flags.part.0+0x50/0x4f0
[ 2527.814295]  should_failslab+0x9/0x20
[ 2527.814568]  kmem_cache_alloc+0x5a/0x320
[ 2527.814854]  ? asm_exc_page_fault+0x26/0x30
[ 2527.815161]  getname_flags.part.0+0x50/0x4f0
[ 2527.815477]  getname_flags+0x9e/0xf0
[ 2527.815752]  user_path_at_empty+0x2f/0x70
[ 2527.816049]  __x64_sys_mount+0x1ed/0x310
[ 2527.816340]  ? __pfx___x64_sys_mount+0x10/0x10
[ 2527.816682]  do_syscall_64+0x3f/0x90
[ 2527.816947]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2527.817301] RIP: 0033:0x7f4a073e004a
[ 2527.817559] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2527.818751] RSP: 002b:00007f4a04953fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 2527.819265] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a073e004a
[ 2527.819746] RDX: 0000000020000280 RSI: 0000000020000080 RDI: 0000000000000000
[ 2527.820235] RBP: 00007f4a04954040 R08: 00007f4a04954040 R09: 0000000020000280
[ 2527.820737] R10: 00000000000000ae R11: 0000000000000206 R12: 0000000020000280
[ 2527.821221] R13: 0000000020000080 R14: 00007f4a04954000 R15: 0000000020000100
[ 2527.821729]  </TASK>
16:19:41 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xf0ffff, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2527.834860] FAULT_INJECTION: forcing a failure.
[ 2527.834860] name failslab, interval 1, probability 0, space 0, times 0
[ 2527.836534] CPU: 0 PID: 29636 Comm: syz-executor.1 Not tainted 6.2.0-next-20230224 #1
[ 2527.837577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2527.838637] Call Trace:
[ 2527.838984]  <TASK>
[ 2527.839305]  dump_stack_lvl+0xc1/0xf0
[ 2527.839855]  should_fail_ex+0x4b4/0x5b0
[ 2527.840414]  ? getname_flags.part.0+0x50/0x4f0
[ 2527.841054]  should_failslab+0x9/0x20
[ 2527.841578]  kmem_cache_alloc+0x5a/0x320
[ 2527.842139]  ? lock_is_held_type+0x9f/0x120
[ 2527.842754]  getname_flags.part.0+0x50/0x4f0
[ 2527.843382]  getname+0x92/0xe0
[ 2527.843850]  do_sys_openat2+0xf9/0x4c0
[ 2527.844384]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2527.845127]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2527.845762]  __x64_sys_creat+0xcd/0x120
[ 2527.846328]  ? __pfx___x64_sys_creat+0x10/0x10
[ 2527.846971]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2527.847695]  do_syscall_64+0x3f/0x90
[ 2527.848211]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2527.848916] RIP: 0033:0x7f8434168b19
[ 2527.849422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2527.851767] RSP: 002b:00007f84316de188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[ 2527.852770] RAX: ffffffffffffffda RBX: 00007f843427bf60 RCX: 00007f8434168b19
[ 2527.853701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100
[ 2527.854626] RBP: 00007f84316de1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2527.855551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2527.856508] R13: 00007ffe1166621f R14: 00007f84316de300 R15: 0000000000022000
[ 2527.857450]  </TASK>
16:19:41 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x8)

[ 2527.890957] syz-executor.3: attempt to access beyond end of device
[ 2527.890957] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2527.891855] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:19:41 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 11)

16:19:41 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)

16:19:41 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
readv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/191, 0xbf}], 0x2)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
sendfile(r2, r3, 0x0, 0xfffffffffffffff9)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'})

16:19:41 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x1000000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2528.000836] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:19:41 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 12)

16:19:41 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 2)

16:19:41 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x7}}, './file0\x00'})
sendfile(r1, r2, 0x0, 0x1)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:19:41 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x9)

[ 2528.105039] FAULT_INJECTION: forcing a failure.
[ 2528.105039] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2528.106019] CPU: 1 PID: 29803 Comm: syz-executor.5 Not tainted 6.2.0-next-20230224 #1
[ 2528.106539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2528.107070] Call Trace:
[ 2528.107295]  <TASK>
[ 2528.107495]  dump_stack_lvl+0xc1/0xf0
[ 2528.107802]  should_fail_ex+0x4b4/0x5b0
[ 2528.108141]  strncpy_from_user+0x38/0x3e0
[ 2528.108449]  getname_flags.part.0+0x95/0x4f0
[ 2528.108784]  getname_flags+0x9e/0xf0
[ 2528.109063]  user_path_at_empty+0x2f/0x70
[ 2528.109396]  __x64_sys_mount+0x1ed/0x310
[ 2528.109692]  ? __pfx___x64_sys_mount+0x10/0x10
[ 2528.110020]  do_syscall_64+0x3f/0x90
[ 2528.110291]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2528.110665] RIP: 0033:0x7f4a073e004a
[ 2528.110919] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2528.112165] RSP: 002b:00007f4a04953fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 2528.112688] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a073e004a
[ 2528.113173] RDX: 0000000020000280 RSI: 0000000020000080 RDI: 0000000000000000
[ 2528.113641] RBP: 00007f4a04954040 R08: 00007f4a04954040 R09: 0000000020000280
[ 2528.114111] R10: 00000000000000ae R11: 0000000000000206 R12: 0000000020000280
[ 2528.114625] R13: 0000000020000080 R14: 00007f4a04954000 R15: 0000000020000100
[ 2528.115132]  </TASK>
[ 2528.572703] loop3: detected capacity change from 0 to 40
[ 2528.574159] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value
16:19:54 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

16:19:54 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xffffff9e, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:19:54 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0xffff, 0x8, [{0x3ff, 0x3, 0x9, '\x00', 0x102}, {0x93a, 0xffffffffffffffff, 0x0, '\x00', 0x2004}, {0xdb28, 0x7ff, 0x200}, {0xff, 0x3, 0x400, '\x00', 0x2000}, {0x200000000, 0x4, 0x2, '\x00', 0x1d01}, {0x4, 0x100, 0x7802d442, '\x00', 0x80}, {0xffff, 0x1f, 0x100, '\x00', 0x400}, {0x909, 0x5, 0xc7, '\x00', 0x2149}]})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
openat(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x14)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000180)={0x0, 0x101, [0x5, 0x40, 0x4, 0x5, 0x63, 0x7]})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r3, r1, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:19:54 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x2000000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:19:54 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 13)

16:19:54 executing program 2:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=<r0=>0x0)
r1 = pidfd_open(r0, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000040)='net/packet\x00')
r3 = pidfd_open(r0, 0x0)
readv(r2, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440))
write$binfmt_aout(r1, &(0x7f0000000080)={{0x108, 0x4, 0x3, 0x240, 0x390, 0x0, 0x1f0, 0x1}, "54087a0807f92b2e5c168c", ['\x00', '\x00']}, 0x22b)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000000)={0x32, 0x2, 0x2, 0xa, 0x0, [@loopback]}, 0x18)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r5=>r1, {r3}}, './file0\x00'})
ioctl$int_in(r5, 0x5452, &(0x7f0000000400)=0x3)
pread64(r4, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r6, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000480)={<r7=>r4, 0x200, 0xffffffffffff7fff})
ioctl$BLKFRASET(r7, 0x1264, &(0x7f00000002c0)=0x1)

16:19:54 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xe)

16:19:54 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 3)

[ 2541.540323] FAULT_INJECTION: forcing a failure.
[ 2541.540323] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2541.541148] CPU: 0 PID: 29977 Comm: syz-executor.1 Not tainted 6.2.0-next-20230224 #1
[ 2541.541717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2541.542255] Call Trace:
[ 2541.542451]  <TASK>
[ 2541.542613]  dump_stack_lvl+0xc1/0xf0
[ 2541.542880]  should_fail_ex+0x4b4/0x5b0
[ 2541.543163]  strncpy_from_user+0x38/0x3e0
[ 2541.543472]  getname_flags.part.0+0x95/0x4f0
[ 2541.543784]  getname+0x92/0xe0
[ 2541.544021]  do_sys_openat2+0xf9/0x4c0
[ 2541.544297]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2541.544667]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2541.544987]  __x64_sys_creat+0xcd/0x120
[ 2541.545268]  ? __pfx___x64_sys_creat+0x10/0x10
[ 2541.545592]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2541.545960]  do_syscall_64+0x3f/0x90
[ 2541.546218]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2541.546571] RIP: 0033:0x7f8434168b19
[ 2541.546825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2541.548003] RSP: 002b:00007f84316de188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[ 2541.548512] RAX: ffffffffffffffda RBX: 00007f843427bf60 RCX: 00007f8434168b19
[ 2541.548989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100
[ 2541.549456] RBP: 00007f84316de1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2541.549962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2541.550463] R13: 00007ffe1166621f R14: 00007f84316de300 R15: 0000000000022000
[ 2541.550979]  </TASK>
[ 2541.579175] loop3: detected capacity change from 0 to 40
[ 2541.581655] FAULT_INJECTION: forcing a failure.
[ 2541.581655] name failslab, interval 1, probability 0, space 0, times 0
[ 2541.582505] CPU: 0 PID: 29985 Comm: syz-executor.5 Not tainted 6.2.0-next-20230224 #1
[ 2541.583064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2541.583616] Call Trace:
[ 2541.583803]  <TASK>
[ 2541.583967]  dump_stack_lvl+0xc1/0xf0
[ 2541.584251]  should_fail_ex+0x4b4/0x5b0
[ 2541.584551]  should_failslab+0x9/0x20
[ 2541.584840]  __kmem_cache_alloc_node+0x5b/0x310
[ 2541.585184]  ? alloc_fs_context+0x58/0x9d0
[ 2541.585503]  kmalloc_trace+0x26/0x120
[ 2541.585785]  alloc_fs_context+0x58/0x9d0
[ 2541.586094]  path_mount+0x920/0x1e40
[ 2541.586382]  ? kasan_quarantine_put+0x81/0x1d0
[ 2541.586717]  ? __pfx_path_mount+0x10/0x10
[ 2541.587026]  ? putname+0x102/0x140
[ 2541.587278]  ? kmem_cache_free+0xff/0x510
[ 2541.587590]  ? putname+0x102/0x140
[ 2541.587866]  __x64_sys_mount+0x286/0x310
[ 2541.588165]  ? __pfx___x64_sys_mount+0x10/0x10
[ 2541.588505]  do_syscall_64+0x3f/0x90
[ 2541.588799]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2541.589173] RIP: 0033:0x7f4a073e004a
[ 2541.589443] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2541.590665] RSP: 002b:00007f4a04953fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 2541.591171] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a073e004a
[ 2541.591649] RDX: 0000000020000280 RSI: 0000000020000080 RDI: 0000000000000000
[ 2541.592123] RBP: 00007f4a04954040 R08: 00007f4a04954040 R09: 0000000020000280
[ 2541.592607] R10: 00000000000000ae R11: 0000000000000206 R12: 0000000020000280
[ 2541.593084] R13: 0000000020000080 R14: 00007f4a04954000 R15: 0000000020000100
[ 2541.593587]  </TASK>
16:19:54 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x3000000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:19:54 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 4)

16:19:54 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf)

[ 2541.683939] FAULT_INJECTION: forcing a failure.
[ 2541.683939] name failslab, interval 1, probability 0, space 0, times 0
[ 2541.685384] CPU: 1 PID: 30003 Comm: syz-executor.1 Not tainted 6.2.0-next-20230224 #1
[ 2541.686349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2541.687320] Call Trace:
[ 2541.687643]  <TASK>
[ 2541.687930]  dump_stack_lvl+0xc1/0xf0
[ 2541.688414]  should_fail_ex+0x4b4/0x5b0
[ 2541.688946]  ? __alloc_file+0x21/0x240
[ 2541.689436]  should_failslab+0x9/0x20
[ 2541.689921]  kmem_cache_alloc+0x5a/0x320
[ 2541.690436]  __alloc_file+0x21/0x240
[ 2541.690911]  alloc_empty_file+0x71/0x190
[ 2541.691428]  path_openat+0xd8/0x2750
[ 2541.691929]  ? __pfx_path_openat+0x10/0x10
[ 2541.692475]  ? __pfx___lock_acquire+0x10/0x10
[ 2541.693081]  ? __create_object+0x3ee/0xc90
[ 2541.693630]  do_filp_open+0x1ba/0x410
[ 2541.694124]  ? __pfx_do_filp_open+0x10/0x10
[ 2541.694678]  ? find_held_lock+0x2c/0x110
[ 2541.695187]  ? alloc_fd+0x2eb/0x760
[ 2541.695656]  ? lock_release+0x1e3/0x710
[ 2541.696185]  ? do_raw_spin_lock+0x125/0x270
[ 2541.696743]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2541.697325]  ? lock_acquire+0x32/0xc0
[ 2541.697827]  ? alloc_fd+0x6e/0x760
[ 2541.698289]  ? _raw_spin_unlock+0x1e/0x40
[ 2541.698822]  ? alloc_fd+0x2eb/0x760
[ 2541.699303]  do_sys_openat2+0x171/0x4c0
[ 2541.699809]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2541.700481]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2541.701083]  __x64_sys_creat+0xcd/0x120
[ 2541.701600]  ? __pfx___x64_sys_creat+0x10/0x10
[ 2541.702060] syz-executor.3: attempt to access beyond end of device
[ 2541.702060] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2541.702185]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2541.703790] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2541.704373]  do_syscall_64+0x3f/0x90
[ 2541.704408]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2541.706565] RIP: 0033:0x7f8434168b19
[ 2541.707046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2541.709296] RSP: 002b:00007f84316de188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[ 2541.710250] RAX: ffffffffffffffda RBX: 00007f843427bf60 RCX: 00007f8434168b19
[ 2541.711155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100
[ 2541.712051] RBP: 00007f84316de1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2541.712963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2541.713863] R13: 00007ffe1166621f R14: 00007f84316de300 R15: 0000000000022000
[ 2541.714784]  </TASK>
16:19:54 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 14)

16:19:54 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:19:55 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xfffffff0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2541.862565] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:19:55 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x4000000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:19:55 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x14)

16:19:55 executing program 2:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=<r0=>0x0)
pidfd_open(r0, 0x0)
r1 = fork()
r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/snmp\x00')
readv(r2, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0)

16:19:55 executing program 7:
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:19:55 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 15)

16:19:55 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
open$dir(&(0x7f0000000040)='./file1\x00', 0x27103, 0x30)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/8139too', 0x100, 0x40)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[ 2542.059068] loop3: detected capacity change from 0 to 40
[ 2542.094037] FAULT_INJECTION: forcing a failure.
[ 2542.094037] name failslab, interval 1, probability 0, space 0, times 0
[ 2542.095473] CPU: 0 PID: 30223 Comm: syz-executor.5 Not tainted 6.2.0-next-20230224 #1
[ 2542.096424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2542.097432] Call Trace:
[ 2542.097761]  <TASK>
[ 2542.098053]  dump_stack_lvl+0xc1/0xf0
[ 2542.098555]  should_fail_ex+0x4b4/0x5b0
[ 2542.099081]  should_failslab+0x9/0x20
[ 2542.099582]  __kmem_cache_alloc_node+0x5b/0x310
[ 2542.100190]  ? ext4_init_fs_context+0x41/0xd0
[ 2542.100781]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2542.101382]  kmalloc_trace+0x26/0x120
[ 2542.101867]  ext4_init_fs_context+0x41/0xd0
[ 2542.102413]  ? __pfx_ext4_init_fs_context+0x10/0x10
[ 2542.103045]  alloc_fs_context+0x568/0x9d0
[ 2542.103585]  path_mount+0x920/0x1e40
[ 2542.104079]  ? kasan_quarantine_put+0x81/0x1d0
[ 2542.104699]  ? __pfx_path_mount+0x10/0x10
[ 2542.105260]  ? putname+0x102/0x140
[ 2542.105753]  ? kmem_cache_free+0xff/0x510
[ 2542.106313]  ? putname+0x102/0x140
[ 2542.106829]  __x64_sys_mount+0x286/0x310
[ 2542.107381]  ? __pfx___x64_sys_mount+0x10/0x10
[ 2542.108015]  do_syscall_64+0x3f/0x90
[ 2542.108517]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2542.109217] RIP: 0033:0x7f4a073e004a
[ 2542.109710] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2542.111992] RSP: 002b:00007f4a04953fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 2542.112972] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a073e004a
[ 2542.113878] RDX: 0000000020000280 RSI: 0000000020000080 RDI: 0000000000000000
[ 2542.114779] RBP: 00007f4a04954040 R08: 00007f4a04954040 R09: 0000000020000280
[ 2542.115683] R10: 00000000000000ae R11: 0000000000000206 R12: 0000000020000280
[ 2542.116591] R13: 0000000020000080 R14: 00007f4a04954000 R15: 0000000020000100
[ 2542.117533]  </TASK>
[ 2542.154886] syz-executor.3: attempt to access beyond end of device
[ 2542.154886] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2542.156495] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:20:07 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 5)

16:20:07 executing program 7:
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:20:07 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
write$binfmt_elf64(r0, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x1a, 0x9, 0xbfe9, 0x2, 0x3e, 0x1c, 0x110, 0x40, 0x396, 0x810000, 0x6, 0x38, 0x2, 0x7, 0x2, 0x4}, [{0x3, 0x1f, 0x3, 0x7fb, 0x3, 0x101, 0x7ff}], ' ', ['\x00']}, 0x179)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x2082, 0x20)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000003c0)={0x0, 0x10000, 0x2, 0x1})
ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000080))

16:20:07 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x5000000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:20:07 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000200)={&(0x7f00000007c0)=""/4096, 0x1000, 0x4, 0x9})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup3(0xffffffffffffffff, r3, 0x80000)
sendfile(0xffffffffffffffff, r3, 0x0, 0xfffffdef)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r6=>0x0})
sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @broadcast}}}], 0x20}, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)

16:20:07 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xffffffff, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:20:07 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 16)

16:20:07 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x300)

[ 2554.712405] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2554.717708] loop3: detected capacity change from 0 to 40
16:20:07 executing program 7:
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:20:07 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 17)

16:20:07 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xed6)

16:20:07 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 6)

16:20:07 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x6000000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:20:08 executing program 7:
r0 = syz_open_procfs(0x0, 0x0)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

[ 2554.824701] FAULT_INJECTION: forcing a failure.
[ 2554.824701] name failslab, interval 1, probability 0, space 0, times 0
[ 2554.825612] CPU: 1 PID: 30557 Comm: syz-executor.5 Not tainted 6.2.0-next-20230224 #1
[ 2554.826133] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2554.826667] Call Trace:
[ 2554.826846]  <TASK>
[ 2554.827006]  dump_stack_lvl+0xc1/0xf0
[ 2554.827275]  should_fail_ex+0x4b4/0x5b0
[ 2554.827555]  ? vfs_parse_fs_string+0xc4/0x150
[ 2554.827865]  should_failslab+0x9/0x20
[ 2554.828128]  __kmem_cache_alloc_node+0x5b/0x310
[ 2554.828447]  ? vfs_parse_fs_string+0xc4/0x150
[ 2554.828768]  ? vfs_parse_fs_string+0xc4/0x150
[ 2554.829090]  __kmalloc_node_track_caller+0x43/0xb0
[ 2554.829422]  kmemdup_nul+0x36/0xb0
[ 2554.829670]  vfs_parse_fs_string+0xc4/0x150
[ 2554.829797] FAULT_INJECTION: forcing a failure.
[ 2554.829797] name failslab, interval 1, probability 0, space 0, times 0
[ 2554.829989]  ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 2554.831058]  generic_parse_monolithic+0x173/0x1f0
[ 2554.831391]  ? __pfx_generic_parse_monolithic+0x10/0x10
[ 2554.831757]  ? __pfx_ext4_init_fs_context+0x10/0x10
[ 2554.832103]  ? alloc_fs_context+0x5b1/0x9d0
[ 2554.832408]  path_mount+0x980/0x1e40
[ 2554.832675]  ? kasan_quarantine_put+0x81/0x1d0
[ 2554.833000]  ? __pfx_path_mount+0x10/0x10
[ 2554.833288]  ? putname+0x102/0x140
[ 2554.833558]  ? kmem_cache_free+0xff/0x510
[ 2554.833866]  ? putname+0x102/0x140
[ 2554.834143]  __x64_sys_mount+0x286/0x310
[ 2554.834450]  ? __pfx___x64_sys_mount+0x10/0x10
[ 2554.834799]  do_syscall_64+0x3f/0x90
[ 2554.835071]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2554.835452] RIP: 0033:0x7f4a073e004a
[ 2554.835725] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2554.836988] RSP: 002b:00007f4a04953fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 2554.837520] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a073e004a
[ 2554.838017] RDX: 0000000020000280 RSI: 0000000020000080 RDI: 0000000000000000
[ 2554.838521] RBP: 00007f4a04954040 R08: 00007f4a04954040 R09: 0000000020000280
[ 2554.839021] R10: 00000000000000ae R11: 0000000000000206 R12: 0000000020000280
[ 2554.839513] R13: 0000000020000080 R14: 00007f4a04954000 R15: 0000000020000100
[ 2554.840025]  </TASK>
[ 2554.840195] CPU: 0 PID: 30560 Comm: syz-executor.1 Not tainted 6.2.0-next-20230224 #1
[ 2554.840744] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2554.841323] Call Trace:
[ 2554.841508]  <TASK>
[ 2554.841670]  dump_stack_lvl+0xc1/0xf0
[ 2554.841944]  should_fail_ex+0x4b4/0x5b0
[ 2554.842243]  ? security_file_alloc+0x38/0x170
[ 2554.842574]  should_failslab+0x9/0x20
[ 2554.842852]  kmem_cache_alloc+0x5a/0x320
[ 2554.843152]  security_file_alloc+0x38/0x170
[ 2554.843467]  __alloc_file+0xb6/0x240
[ 2554.843745]  alloc_empty_file+0x71/0x190
[ 2554.844041]  path_openat+0xd8/0x2750
[ 2554.844326]  ? __pfx_path_openat+0x10/0x10
16:20:08 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')

[ 2554.844641]  ? __pfx___lock_acquire+0x10/0x10
[ 2554.845064]  ? __create_object+0x3ee/0xc90
[ 2554.845370]  do_filp_open+0x1ba/0x410
[ 2554.845654]  ? __pfx_do_filp_open+0x10/0x10
[ 2554.845973]  ? find_held_lock+0x2c/0x110
[ 2554.846273]  ? alloc_fd+0x2eb/0x760
[ 2554.846544]  ? lock_release+0x1e3/0x710
[ 2554.846847]  ? do_raw_spin_lock+0x125/0x270
[ 2554.847161]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2554.847504]  ? lock_acquire+0x32/0xc0
[ 2554.847789]  ? alloc_fd+0x6e/0x760
[ 2554.848062]  ? _raw_spin_unlock+0x1e/0x40
[ 2554.848366]  ? alloc_fd+0x2eb/0x760
[ 2554.848630]  do_sys_openat2+0x171/0x4c0
[ 2554.848947]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2554.849330]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2554.849675]  __x64_sys_creat+0xcd/0x120
[ 2554.849968]  ? __pfx___x64_sys_creat+0x10/0x10
[ 2554.850313]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2554.850697]  do_syscall_64+0x3f/0x90
[ 2554.850967]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2554.851345] RIP: 0033:0x7f8434168b19
[ 2554.851611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2554.852841] RSP: 002b:00007f84316de188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[ 2554.853380] RAX: ffffffffffffffda RBX: 00007f843427bf60 RCX: 00007f8434168b19
[ 2554.853889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100
[ 2554.854386] RBP: 00007f84316de1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2554.854884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2554.855386] R13: 00007ffe1166621f R14: 00007f84316de300 R15: 0000000000022000
[ 2554.855898]  </TASK>
16:20:08 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xee6)

16:20:08 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x7000000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:20:08 executing program 7:
r0 = syz_open_procfs(0x0, 0x0)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:20:27 executing program 7:
r0 = syz_open_procfs(0x0, 0x0)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:20:27 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x9000000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:20:27 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 7)

16:20:27 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xffffff9e, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:20:27 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xef6)

16:20:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff})
write$P9_ROPEN(r2, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x3, 0x2, 0x5}, 0x6}}, 0x18)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
openat2(r3, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x301200, 0x22, 0x8}, 0x18)

16:20:27 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:20:27 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 18)

[ 2574.042117] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2574.078968] loop3: detected capacity change from 0 to 40
16:20:27 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 8)

16:20:27 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 19)

16:20:27 executing program 7:
syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:20:27 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf06)

[ 2574.172024] syz-executor.3: attempt to access beyond end of device
[ 2574.172024] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2574.173757] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:20:27 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xd020000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2574.217767] FAULT_INJECTION: forcing a failure.
[ 2574.217767] name failslab, interval 1, probability 0, space 0, times 0
[ 2574.219447] CPU: 0 PID: 30706 Comm: syz-executor.1 Not tainted 6.2.0-next-20230224 #1
[ 2574.220407] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2574.221429] Call Trace:
[ 2574.221757]  <TASK>
[ 2574.222058]  dump_stack_lvl+0xc1/0xf0
[ 2574.222558]  should_fail_ex+0x4b4/0x5b0
[ 2574.223092]  should_failslab+0x9/0x20
[ 2574.223596]  kmem_cache_alloc_lru+0x6b/0x590
[ 2574.224163]  ? __d_alloc+0x31/0x9c0
[ 2574.224663]  ? mark_lock.part.0+0xef/0x2f30
[ 2574.225262]  __d_alloc+0x31/0x9c0
[ 2574.225734]  d_alloc_parallel+0x10e/0x1640
[ 2574.226273]  ? __d_lookup+0x247/0x4a0
[ 2574.226765]  ? lock_release+0x1e3/0x710
[ 2574.227318]  ? lock_release+0x1e3/0x710
[ 2574.227846]  ? __pfx_d_alloc_parallel+0x10/0x10
[ 2574.228431]  ? lock_is_held_type+0x9f/0x120
[ 2574.228997]  ? __d_lookup+0x269/0x4a0
[ 2574.229519]  lookup_open.isra.0+0x912/0x1400
[ 2574.230091]  ? lock_acquire.part.0+0xea/0x320
[ 2574.230677]  ? __pfx_lookup_open.isra.0+0x10/0x10
[ 2574.231316]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 2574.231959]  ? path_openat+0x916/0x2750
[ 2574.232462]  ? lock_acquire+0x32/0xc0
[ 2574.232958]  ? path_openat+0x916/0x2750
[ 2574.233528]  ? __pfx_down_write+0x10/0x10
[ 2574.234054]  ? __mnt_want_write+0x1f4/0x2e0
[ 2574.234600]  path_openat+0x97c/0x2750
[ 2574.235126]  ? __pfx_path_openat+0x10/0x10
[ 2574.235664]  ? __pfx___lock_acquire+0x10/0x10
[ 2574.236250]  ? __create_object+0x3ee/0xc90
[ 2574.236801]  do_filp_open+0x1ba/0x410
[ 2574.237328]  ? __pfx_do_filp_open+0x10/0x10
[ 2574.237891]  ? find_held_lock+0x2c/0x110
[ 2574.238427]  ? do_raw_spin_lock+0x125/0x270
[ 2574.238969]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2574.239548]  ? lock_acquire+0x32/0xc0
[ 2574.240049]  ? alloc_fd+0x6e/0x760
[ 2574.240519]  ? _raw_spin_unlock+0x1e/0x40
[ 2574.241047]  ? alloc_fd+0x2eb/0x760
[ 2574.241539]  do_sys_openat2+0x171/0x4c0
[ 2574.242047]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2574.242716]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2574.243317]  __x64_sys_creat+0xcd/0x120
[ 2574.243829]  ? __pfx___x64_sys_creat+0x10/0x10
[ 2574.244417]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2574.245113]  do_syscall_64+0x3f/0x90
[ 2574.245600]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2574.246236] RIP: 0033:0x7f8434168b19
[ 2574.246700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2574.248816] RSP: 002b:00007f84316de188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[ 2574.249735] RAX: ffffffffffffffda RBX: 00007f843427bf60 RCX: 00007f8434168b19
[ 2574.250595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100
[ 2574.251447] RBP: 00007f84316de1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2574.252305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2574.253176] R13: 00007ffe1166621f R14: 00007f84316de300 R15: 0000000000022000
[ 2574.254057]  </TASK>
[ 2574.271425] syz-executor.3: attempt to access beyond end of device
[ 2574.271425] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2574.273072] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2574.288989] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2574.302397] FAULT_INJECTION: forcing a failure.
[ 2574.302397] name failslab, interval 1, probability 0, space 0, times 0
[ 2574.303916] CPU: 0 PID: 30712 Comm: syz-executor.5 Not tainted 6.2.0-next-20230224 #1
[ 2574.304870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2574.305847] Call Trace:
[ 2574.306181]  <TASK>
[ 2574.306484]  dump_stack_lvl+0xc1/0xf0
[ 2574.307011]  should_fail_ex+0x4b4/0x5b0
[ 2574.307560]  ? getname_flags.part.0+0x50/0x4f0
[ 2574.308151]  should_failslab+0x9/0x20
[ 2574.308676]  kmem_cache_alloc+0x5a/0x320
[ 2574.309234]  getname_flags.part.0+0x50/0x4f0
[ 2574.309826]  getname+0x92/0xe0
[ 2574.310293]  do_sys_openat2+0xf9/0x4c0
[ 2574.310806]  ? perf_trace_run_bpf_submit+0xf3/0x190
[ 2574.311463]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2574.312104]  ? perf_trace_preemptirq_template+0x252/0x420
[ 2574.313045]  __x64_sys_openat+0x143/0x200
[ 2574.313730]  ? __pfx___x64_sys_openat+0x10/0x10
[ 2574.314513]  do_syscall_64+0x3f/0x90
[ 2574.315096]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2574.315947] RIP: 0033:0x7f4a07391a04
[ 2574.316574] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 2574.319440] RSP: 002b:00007f4a04953f30 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 2574.320633] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a07391a04
[ 2574.321503] RDX: 0000000000010000 RSI: 0000000020000080 RDI: 00000000ffffff9c
[ 2574.322352] RBP: 0000000020000080 R08: 0000000000000000 R09: 0000000020000280
[ 2574.323198] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000010000
[ 2574.324049] R13: 0000000020000080 R14: 00007f4a04954000 R15: 0000000020000100
[ 2574.324946]  </TASK>
16:20:27 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf15)

16:20:27 executing program 7:
syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:20:27 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 20)

16:20:27 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
times(0xfffffffffffffffc)
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
r1 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x0)
sendfile(r1, r0, &(0x7f0000000740)=0x76, 0x10001)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r3 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x0)
dup2(r3, r2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
openat(r4, &(0x7f0000000780)='./file1\x00', 0x402400, 0x1)
sendfile(r4, r2, 0x0, 0x10001)
r5 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x8, &(0x7f0000000680)=[{&(0x7f0000000200)="ca3e5d43f7dd4dbcc1a37d0857089dd6d2e14e850b1dd1b89a44b14bd1d8cf4d8b9b5ad47fef6883b934d1a0deb790cfdab69858e66f4e33f379f56422e0e7d4", 0x40, 0x8}, {&(0x7f0000000240)="fe79e1c30ae8d8be32d947125536b087bf991907ea031efb8e922121b5ec7e1222936ff24698936035744a5f39ce626bb18f39006ab350404d2d82e1aa90fd7ab44d17d13e1dd464d85765e9f28ec8c6e934f72331a1fd38559ee3b9b9d146e30ffb51d661b70cc15f", 0x69, 0x8000}, {&(0x7f00000002c0)="c3c5e8c3b1f35daf93014ce6c86dcb83045db41e784f66e98151179b623f88536e9f906c1f1cd8942ebe985b5bac5e784f1c8856b49d3ace3b4964bc5e1ba5a053a5ef7d7f44a8b691855f5c73742e7959a2a6b51c9860a76fb4d98eefae3fcd05ba880a74b19f92abfaaf04b12637b7f0e3c8d0dcdc00b733fc73239c6487d66985fba8e1166d332320006e3457c41017602ca609edbf4eaa4491893599edc7f018bc28a54dfdc516d6f8c492fe72202c679d8c61dbe9fd87ae941af2b595e3b37c6f03929e467b4e201a2925e1036c84d8ad", 0xd3, 0x8001}, {&(0x7f00000003c0)="faac92490b08f3687e5d8af7c3a5606686327dce09777a479ed48302a74035767ee3f3a69e70affd016a5514438050b17a0e2f551dab7eacc77bb87d575a918ea86df17679a70d3dae7fb8d27bb345c6964fe71ae61ef46aad52d700e2c082db95b704b682", 0x65, 0x20}, {&(0x7f0000000440)="5d1a4cc30760dc60dbb1acb0bfaa5758695062fd965295b9c8f972b45d4548f31cae342398619943440c848958525b4d1d1b7782c219c97bf69a5891c7d39aade2508a2bc0d956c1848eca1dd465ce0eee456550993a16a2dcf1b54ab7fdaced3b6fd6f15b9044f96fc5c57c20df149be116964b98b7d17838765baf6684575c2e8382766ec9b4535b27946278fc13a6078a7758d47c61e9fb8e5a1a3d1b2a3823dfcff826740d16f1cb26b136", 0xad}, {&(0x7f0000000500)="cb96d5f37b99432c66a4235c2cb488a1766299e409425e36de9f747d4eb21d2b9d6855875ecfec14a93a5e02ea8e085dba0848b7c4e1a187d61dbb6d420e8d7f84de3d17c0f1", 0x46, 0x4}, {&(0x7f0000000580)="c9bfa5b2558de4d5cb7b85e3d0febbd6ac26dd96cb26c4238ca50a5f52aca33f31be2d809aaf4ad74149d89edf97608e7fedbd7707012aaf64285c1d8611f4a978c7d6fb113651d1ab379260021dfe6a416c30cc137e463e03d373d366eb2e6b62ba94caf2dcbd57f88a16f226b2857b2b1d16bf604bcc04e377640ecbd9c3a0933dcd02889a9a4914525b669a81cb80cae7", 0x92, 0x3}, {&(0x7f0000000640)="3e01969c1d14143be13c69ecdd8e8f047b1968e85fbcc15879bdbf168cca3e971924764ca802de6d0e6167f8fd737fdd742d2aee52b7761f691d8429", 0x3c, 0x8}], 0x4f536ca56b6b5ec0, &(0x7f0000000840)={[{@bh}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x39, 0x36, 0x39, 0x34, 0x65, 0x64, 0x37], 0x2d, [0x64, 0x37, 0x33, 0x36], 0x2d, [0x33, 0x34, 0x2], 0x2d, [0x39, 0x61, 0x38, 0x63], 0x2d, [0x35, 0x37, 0x36, 0x39, 0x39, 0x61, 0x63, 0x39]}}}, {@obj_user={'obj_user', 0x3d, '^-#%'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@uid_lt={'uid<', 0xee01}}, {@seclabel}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}, {@smackfsdef}, {@euid_eq={'euid', 0x3d, 0xee01}}]})
openat(r5, &(0x7f0000000800)='./file0\x00', 0xa8000, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000040))

16:20:27 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 9)

16:20:27 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xf000000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2574.561791] loop3: detected capacity change from 0 to 40
[ 2574.616045] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2574.653490] syz-executor.3: attempt to access beyond end of device
[ 2574.653490] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2574.655193] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2574.690802] syz-executor.3: attempt to access beyond end of device
[ 2574.690802] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2574.692721] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:20:40 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)

16:20:40 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x8b020000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:20:40 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf25)

16:20:40 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 21)

16:20:40 executing program 7:
syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:20:40 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000140))
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000040)={0x4, 0x2, 0x10})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:20:40 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x2, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:20:40 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 10)

[ 2587.270078] FAULT_INJECTION: forcing a failure.
[ 2587.270078] name failslab, interval 1, probability 0, space 0, times 0
[ 2587.270922] CPU: 0 PID: 30848 Comm: syz-executor.1 Not tainted 6.2.0-next-20230224 #1
[ 2587.271443] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2587.271982] Call Trace:
[ 2587.272166]  <TASK>
[ 2587.272326]  dump_stack_lvl+0xc1/0xf0
[ 2587.272596]  should_fail_ex+0x4b4/0x5b0
[ 2587.272892]  should_failslab+0x9/0x20
[ 2587.273159]  kmem_cache_alloc_lru+0x6b/0x590
[ 2587.273481]  ? ext4_alloc_inode+0x28/0x680
[ 2587.273781]  ? __pfx_ext4_alloc_inode+0x10/0x10
[ 2587.274100]  ext4_alloc_inode+0x28/0x680
[ 2587.274379]  ? __pfx_ext4_alloc_inode+0x10/0x10
[ 2587.274696]  alloc_inode+0x63/0x240
[ 2587.274958]  new_inode+0x25/0x1f0
[ 2587.275212]  __ext4_new_inode+0x323/0x55f0
[ 2587.275520]  ? d_splice_alias+0x4cb/0xe30
[ 2587.275814]  ? __pfx___ext4_new_inode+0x10/0x10
[ 2587.276145]  ? do_raw_spin_unlock+0x53/0x220
[ 2587.276461]  ? d_splice_alias+0x4eb/0xe30
[ 2587.276751]  ext4_create+0x2e4/0x4e0
[ 2587.277022]  ? __pfx_ext4_create+0x10/0x10
[ 2587.277346]  ? __pfx_ext4_create+0x10/0x10
[ 2587.277648]  lookup_open.isra.0+0x1032/0x1400
[ 2587.277998]  ? __pfx_lookup_open.isra.0+0x10/0x10
[ 2587.278353]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 2587.278729]  ? path_openat+0x916/0x2750
[ 2587.279029]  ? lock_acquire+0x32/0xc0
[ 2587.279316]  ? path_openat+0x916/0x2750
[ 2587.279628]  ? __pfx_down_write+0x10/0x10
[ 2587.279936]  ? __mnt_want_write+0x1f4/0x2e0
[ 2587.280257]  path_openat+0x97c/0x2750
[ 2587.280559]  ? __pfx_path_openat+0x10/0x10
[ 2587.280874]  ? __pfx___lock_acquire+0x10/0x10
[ 2587.281218]  ? __create_object+0x3ee/0xc90
[ 2587.281545]  do_filp_open+0x1ba/0x410
[ 2587.281834]  ? __pfx_do_filp_open+0x10/0x10
[ 2587.282157]  ? find_held_lock+0x2c/0x110
[ 2587.282466]  ? do_raw_spin_lock+0x125/0x270
[ 2587.282783]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2587.283130]  ? lock_acquire+0x32/0xc0
[ 2587.283419]  ? alloc_fd+0x6e/0x760
[ 2587.283689]  ? _raw_spin_unlock+0x1e/0x40
[ 2587.283997]  ? alloc_fd+0x2eb/0x760
[ 2587.284280]  do_sys_openat2+0x171/0x4c0
[ 2587.284581]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2587.284973]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2587.285306] loop3: detected capacity change from 0 to 40
[ 2587.285334]  __x64_sys_creat+0xcd/0x120
[ 2587.286345]  ? __pfx___x64_sys_creat+0x10/0x10
[ 2587.286681]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2587.287073]  do_syscall_64+0x3f/0x90
[ 2587.287349]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2587.287725] RIP: 0033:0x7f8434168b19
[ 2587.287979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2587.289295] RSP: 002b:00007f84316de188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[ 2587.289831] RAX: ffffffffffffffda RBX: 00007f843427bf60 RCX: 00007f8434168b19
[ 2587.290346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100
[ 2587.290859] RBP: 00007f84316de1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2587.291368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2587.291877] R13: 00007ffe1166621f R14: 00007f84316de300 R15: 0000000000022000
[ 2587.292402]  </TASK>
[ 2587.299195] FAT-fs (loop3): Unrecognized mount option "" or missing value
[ 2587.302362] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:20:40 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, 0x0, 0x0)

16:20:40 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x9effffff, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:20:40 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 22)

16:20:40 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf35)

[ 2587.477575] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2587.478782] FAULT_INJECTION: forcing a failure.
[ 2587.478782] name failslab, interval 1, probability 0, space 0, times 0
[ 2587.479729] CPU: 0 PID: 30942 Comm: syz-executor.5 Not tainted 6.2.0-next-20230224 #1
[ 2587.480326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2587.480869] Call Trace:
[ 2587.481047]  <TASK>
[ 2587.481210]  dump_stack_lvl+0xc1/0xf0
[ 2587.481504]  should_fail_ex+0x4b4/0x5b0
[ 2587.481805]  ? __alloc_file+0x21/0x240
[ 2587.482097]  should_failslab+0x9/0x20
[ 2587.482378]  kmem_cache_alloc+0x5a/0x320
[ 2587.482688]  __alloc_file+0x21/0x240
[ 2587.482950]  alloc_empty_file+0x71/0x190
[ 2587.483238]  path_openat+0xd8/0x2750
[ 2587.483513]  ? __pfx_path_openat+0x10/0x10
[ 2587.483805]  ? __pfx___lock_acquire+0x10/0x10
[ 2587.484125]  ? __create_object+0x3ee/0xc90
[ 2587.484438]  do_filp_open+0x1ba/0x410
[ 2587.484719]  ? __pfx_do_filp_open+0x10/0x10
[ 2587.485023]  ? find_held_lock+0x2c/0x110
[ 2587.485315]  ? alloc_fd+0x2eb/0x760
[ 2587.485595]  ? lock_release+0x1e3/0x710
[ 2587.485883]  ? do_raw_spin_lock+0x125/0x270
[ 2587.486179]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2587.486510]  ? lock_acquire+0x32/0xc0
[ 2587.486783]  ? alloc_fd+0x6e/0x760
[ 2587.487039]  ? _raw_spin_unlock+0x1e/0x40
[ 2587.487351]  ? alloc_fd+0x2eb/0x760
[ 2587.487626]  do_sys_openat2+0x171/0x4c0
[ 2587.487923]  ? perf_trace_run_bpf_submit+0xf3/0x190
[ 2587.488295]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2587.488637]  ? perf_trace_preemptirq_template+0x252/0x420
[ 2587.489042]  __x64_sys_openat+0x143/0x200
[ 2587.489355]  ? __pfx___x64_sys_openat+0x10/0x10
[ 2587.489707]  do_syscall_64+0x3f/0x90
[ 2587.489989]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2587.490370] RIP: 0033:0x7f4a07391a04
[ 2587.490646] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 2587.491941] RSP: 002b:00007f4a04953f30 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 2587.492492] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a07391a04
[ 2587.492999] RDX: 0000000000010000 RSI: 0000000020000080 RDI: 00000000ffffff9c
[ 2587.493516] RBP: 0000000020000080 R08: 0000000000000000 R09: 0000000020000280
[ 2587.494026] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000010000
[ 2587.494536] R13: 0000000020000080 R14: 00007f4a04954000 R15: 0000000020000100
[ 2587.495065]  </TASK>
[ 2587.745172] loop3: detected capacity change from 0 to 40
[ 2587.746999] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value
16:20:53 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)

16:20:53 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, 0x0, 0x0)

16:20:53 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001680)={0x5, 0xc5, &(0x7f0000001580)="4cbc45ae64e045c7f535af940899a331dd8eb3b4b164abab807e22b42c55ab6eaaf89a052d4b34402d0e0c13a64979bf6d6648188c0ec83b0fad55791caf44e76c2c28728461ac5c7d8891bb23eb6c16dc60e75506427703f81ec67ebda4d378375cc5c110dec826c4d8e4a10f134beeac8c7ed543f5eb471c95b9f964ec3ab3d0f272ffecb702e0ca06ad5e4a8664fd641905f19f6cbcc212a22f67d6d2e2cff477ea078f98800ee630d6d1b4c016ae11067f5157b81c4faa8e7ed57272d162b2980b5f67"})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x501040, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000016c0), 0x40000, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001740)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000001840)=0xe8)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000001940)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800)
perf_event_open(0x0, 0x0, 0x0, r2, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xff, 0x8, 0x81, 0x8, 0x0, 0x6, 0x82004, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x2, @perf_config_ext={0x3ff, 0x80}, 0x110a, 0x5, 0x1, 0x8, 0x0, 0x3, 0x1, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xd, r2, 0x3)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0xffff, 0x5, &(0x7f0000001480)=[{&(0x7f0000000240)="813450704286b42abc28f424f79e3d7ddcdb743af53f10435e36e2d71bd7c1154fbd2ec87549c75757ecca4bc6046179f0519b1e8aa8ea767d7cf73df444f6c2070ba6b98503a69019611f4a02d0f48f791eef70fdaa67be4808448c7244", 0x5e, 0xfffffffffffffffc}, {&(0x7f00000002c0)="5051664a6369da0261623aecc7b3df4c50627c2584b7964cbd94a461ba1b48d6377dc7a18f44997ab6f86d253fe34a4b7fef2c1a605a45460eab00745d43adbeaa31f1f26fd679f0d0c794d3b6350d72cd306396310b8d678238965b2f05eacd03675833002f61828ec2817b263eaf7ea73a1486a9af414cee7af92442dc4d69c879460fdd394a48800eca6e4ce1161e4ed4806d08533e38c0faad9816686c4464e1d1494daeaddcdb23cf8232fe27243c49ea1b", 0xb4, 0x8000000000000000}, {&(0x7f0000000380)="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", 0x1000, 0x9}, {&(0x7f0000001380)="b6aa7b9b94dfca99b131d94487875cadc65ed4434ffd7928d0f3fdb55735607812b0679c671a1581b098c82d63329fcb066ab7f79db597314e5d8176523fe47173f741466ed2141a122614e44742cf4b4635c2f16a6e73985c59911d3e1e1d4a63683e64ae91dddb7d3a1435662a4a3eed5a2d88253a7be3e124a553fa", 0x7d, 0x9bb}, {&(0x7f0000001400)="b27daf4b57a52450e948e37c4a4d73f15e8e228417dbc58db7b9baaef07cc4ae4f069aaa3e965bc29d7bd8a89ae831924c78e77954f4c1bb01836573f52cf6c74387fa8e5d09ecd4c6fc0eb170c6fa6f1fd89b2fe06dad93848423951c68dac7d43053dd81998b401908eab98d3f07", 0x6f, 0xfffffffffffffc00}], 0x200080, &(0x7f0000001500)={[{}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@subj_role={'subj_role', 0x3d, '-%*(\x9e,-'}}, {@obj_user={'obj_user', 0x3d, '][-]\\'}}, {@uid_eq={'uid', 0x3d, r5}}]})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:20:53 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 23)

16:20:53 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf39)

16:20:53 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x4, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:20:53 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xf0ffffff, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:20:53 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 11)

[ 2600.135741] loop3: detected capacity change from 0 to 40
[ 2600.167923] FAULT_INJECTION: forcing a failure.
[ 2600.167923] name failslab, interval 1, probability 0, space 0, times 0
[ 2600.169452] CPU: 1 PID: 30985 Comm: syz-executor.5 Not tainted 6.2.0-next-20230224 #1
[ 2600.170463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2600.171499] Call Trace:
[ 2600.171843]  <TASK>
[ 2600.172152]  dump_stack_lvl+0xc1/0xf0
[ 2600.172679]  should_fail_ex+0x4b4/0x5b0
[ 2600.173231]  ? __pfx_ext4_lazyinit_thread+0x10/0x10
[ 2600.173923]  should_failslab+0x9/0x20
[ 2600.174442]  __kmem_cache_alloc_node+0x5b/0x310
[ 2600.175091]  ? __kthread_create_on_node+0xde/0x550
[ 2600.175752]  ? __pfx_ext4_lazyinit_thread+0x10/0x10
[ 2600.176414]  kmalloc_trace+0x26/0x120
[ 2600.176933]  __kthread_create_on_node+0xde/0x550
[ 2600.177605]  ? __pfx___kthread_create_on_node+0x10/0x10
[ 2600.178306]  ? lock_is_held_type+0x9f/0x120
[ 2600.178898]  ? find_held_lock+0x2c/0x110
[ 2600.179451]  ? ext4_register_li_request+0x496/0x8c0
[ 2600.180138]  ? trace_contention_end+0xfc/0x140
[ 2600.180749]  ? __mutex_lock+0x224/0x14a0
[ 2600.181331]  ? __pfx_ext4_lazyinit_thread+0x10/0x10
[ 2600.182002]  kthread_create_on_node+0xbf/0x100
[ 2600.182614]  ? __pfx_kthread_create_on_node+0x10/0x10
[ 2600.183304]  ? lockdep_init_map_type+0x21e/0x7e0
[ 2600.183941]  ? __raw_spin_lock_init+0x3a/0x110
[ 2600.184609]  ext4_register_li_request+0x514/0x8c0
[ 2600.185307]  ext4_reconfigure+0x1fc4/0x29a0
[ 2600.185962]  ? __pfx_ext4_reconfigure+0x10/0x10
[ 2600.186623]  ? list_lru_count_node+0x14/0x80
[ 2600.187222]  ? shrink_dcache_sb+0x1c5/0x370
[ 2600.187813]  ? __pfx_shrink_dcache_sb+0x10/0x10
[ 2600.188447]  ? lock_acquire+0x32/0xc0
[ 2600.189005]  reconfigure_super+0x410/0xa50
[ 2600.189634]  ? __pfx_ext4_reconfigure+0x10/0x10
[ 2600.190321]  path_mount+0x182f/0x1e40
[ 2600.190888]  ? kasan_quarantine_put+0x81/0x1d0
[ 2600.191519]  ? __pfx_path_mount+0x10/0x10
[ 2600.192084]  ? putname+0x102/0x140
[ 2600.192585]  ? kmem_cache_free+0xff/0x510
[ 2600.193152]  ? putname+0x102/0x140
[ 2600.193689]  __x64_sys_mount+0x286/0x310
[ 2600.194254]  ? __pfx___x64_sys_mount+0x10/0x10
[ 2600.194903]  do_syscall_64+0x3f/0x90
[ 2600.195417]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2600.196106] RIP: 0033:0x7f4a073e004a
[ 2600.196611] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2600.198946] RSP: 002b:00007f4a04953fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 2600.199940] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a073e004a
[ 2600.200867] RDX: 0000000020000280 RSI: 0000000020000080 RDI: 0000000000000000
[ 2600.201808] RBP: 00007f4a04954040 R08: 00007f4a04954040 R09: 0000000020000280
[ 2600.202736] R10: 00000000000000ae R11: 0000000000000206 R12: 0000000020000280
[ 2600.203673] R13: 0000000020000080 R14: 00007f4a04954000 R15: 0000000020000100
[ 2600.204641]  </TASK>
[ 2600.251457] EXT4-fs: error -12 creating inode table initialization thread
[ 2600.252007] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:21:05 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xfffff000, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:21:05 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf3b)

16:21:05 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x6, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:21:05 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 24)

16:21:05 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
openat(r2, &(0x7f00000000c0)='./file1/file0\x00', 0x42001, 0xca)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x0)
write(r3, &(0x7f0000000180)="6150cf197ff2d0608bf2f9863b6916bd834d0177903de98654b09bb2b867dcd6a6dff872e4117fbec47bfbd37ba5acb19610e33015383c55afc6359d12b02ceb8215442b6831f95814ab41661b96d3fd08eed35f771b59892edf79cdb129f5d5b6300a5eb0613cd159d4b9d55dba1ce4b94ca43aa2b08a1dcfd442d2fb9305c0900b757c3b204990433fa22765ee9103b2feafd054ec4156c60c8a0884b31676adea562f97a9b90078f11741638a813c093f85b2e672c45b58f6e711ed0b071a48f890d30f35a94705d01e123e4c4d785fff", 0xd2)

16:21:05 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, 0x0, 0x0)

16:21:05 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)

16:21:05 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 12)

[ 2612.318870] FAULT_INJECTION: forcing a failure.
[ 2612.318870] name failslab, interval 1, probability 0, space 0, times 0
[ 2612.319735] CPU: 0 PID: 31116 Comm: syz-executor.1 Not tainted 6.2.0-next-20230224 #1
[ 2612.320262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2612.320806] Call Trace:
[ 2612.320989]  <TASK>
[ 2612.321151]  dump_stack_lvl+0xc1/0xf0
[ 2612.321427]  should_fail_ex+0x4b4/0x5b0
[ 2612.321724]  ? security_inode_alloc+0x38/0x160
[ 2612.322044]  should_failslab+0x9/0x20
[ 2612.322312]  kmem_cache_alloc+0x5a/0x320
[ 2612.322601]  security_inode_alloc+0x38/0x160
[ 2612.322918]  inode_init_always+0xbb2/0xea0
[ 2612.323218]  alloc_inode+0x84/0x240
[ 2612.323480]  new_inode+0x25/0x1f0
[ 2612.323736]  __ext4_new_inode+0x323/0x55f0
[ 2612.324047]  ? d_splice_alias+0x4cb/0xe30
[ 2612.324339]  ? __pfx___ext4_new_inode+0x10/0x10
[ 2612.324669]  ? do_raw_spin_unlock+0x53/0x220
[ 2612.324982]  ? d_splice_alias+0x4eb/0xe30
[ 2612.325273]  ext4_create+0x2e4/0x4e0
[ 2612.325551]  ? __pfx_ext4_create+0x10/0x10
[ 2612.325861]  ? __pfx_ext4_create+0x10/0x10
[ 2612.326159]  lookup_open.isra.0+0x1032/0x1400
[ 2612.326481]  ? __pfx_lookup_open.isra.0+0x10/0x10
[ 2612.326815]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 2612.327168]  ? path_openat+0x916/0x2750
[ 2612.327450]  ? lock_acquire+0x32/0xc0
[ 2612.327722]  ? path_openat+0x916/0x2750
[ 2612.328011]  ? __pfx_down_write+0x10/0x10
[ 2612.328298]  ? __mnt_want_write+0x1f4/0x2e0
[ 2612.328602]  path_openat+0x97c/0x2750
[ 2612.328882]  ? __pfx_path_openat+0x10/0x10
[ 2612.329181]  ? __pfx___lock_acquire+0x10/0x10
[ 2612.329501]  ? __create_object+0x3ee/0xc90
[ 2612.329824]  do_filp_open+0x1ba/0x410
[ 2612.330116]  ? __pfx_do_filp_open+0x10/0x10
[ 2612.330421]  ? find_held_lock+0x2c/0x110
[ 2612.330742]  ? do_raw_spin_lock+0x125/0x270
[ 2612.331041]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2612.331383]  ? lock_acquire+0x32/0xc0
[ 2612.331673]  ? alloc_fd+0x6e/0x760
[ 2612.331931]  ? _raw_spin_unlock+0x1e/0x40
[ 2612.332244]  ? alloc_fd+0x2eb/0x760
[ 2612.332509]  do_sys_openat2+0x171/0x4c0
[ 2612.332813]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2612.333212]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2612.333536]  __x64_sys_creat+0xcd/0x120
[ 2612.333845]  ? __pfx___x64_sys_creat+0x10/0x10
[ 2612.334206]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2612.334577]  do_syscall_64+0x3f/0x90
[ 2612.334864]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2612.335219] RIP: 0033:0x7f8434168b19
[ 2612.335500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2612.336687] RSP: 002b:00007f84316de188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[ 2612.337226] RAX: ffffffffffffffda RBX: 00007f843427bf60 RCX: 00007f8434168b19
[ 2612.337740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100
[ 2612.338249] RBP: 00007f84316de1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2612.338749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2612.339261] R13: 00007ffe1166621f R14: 00007f84316de300 R15: 0000000000022000
[ 2612.339801]  </TASK>
[ 2612.341285] loop3: detected capacity change from 0 to 40
[ 2612.359491] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:21:05 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

16:21:05 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf3d)

16:21:05 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 25)

16:21:05 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

16:21:05 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 13)

[ 2612.576297] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:21:05 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf3f)

16:21:05 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

16:21:05 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100)) (fail_nth: 26)

16:21:05 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xffffff7f, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:21:05 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

[ 2612.730702] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2612.731491] FAULT_INJECTION: forcing a failure.
[ 2612.731491] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2612.732520] CPU: 0 PID: 31145 Comm: syz-executor.5 Not tainted 6.2.0-next-20230224 #1
[ 2612.733040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2612.733580] Call Trace:
[ 2612.733771]  <TASK>
[ 2612.733931]  dump_stack_lvl+0xc1/0xf0
[ 2612.734206]  should_fail_ex+0x4b4/0x5b0
[ 2612.734494]  _copy_to_user+0x2e/0x150
[ 2612.734768]  simple_read_from_buffer+0xd0/0x170
[ 2612.735107]  proc_fail_nth_read+0x19c/0x230
[ 2612.735410]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2612.735748]  ? security_file_permission+0xb5/0xe0
[ 2612.736094]  vfs_read+0x257/0x940
[ 2612.736355]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2612.736690]  ? __pfx_vfs_read+0x10/0x10
[ 2612.736973]  ? __pfx___fget_files+0x10/0x10
[ 2612.737281]  ? __fget_files+0x270/0x480
[ 2612.737573]  ksys_read+0x12b/0x260
[ 2612.737846]  ? __pfx_ksys_read+0x10/0x10
[ 2612.738144]  do_syscall_64+0x3f/0x90
[ 2612.738406]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2612.738761] RIP: 0033:0x7f4a0739169c
[ 2612.739018] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2612.740232] RSP: 002b:00007f4a04954170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2612.740770] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f4a0739169c
[ 2612.741270] RDX: 000000000000000f RSI: 00007f4a049541e0 RDI: 0000000000000004
[ 2612.741761] RBP: 00007f4a049541d0 R08: 0000000000000000 R09: 0000000020000280
[ 2612.742261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2612.742772] R13: 00007ffc7219828f R14: 00007f4a04954300 R15: 0000000000022000
[ 2612.743275]  </TASK>
[ 2613.000535] loop3: detected capacity change from 0 to 40
16:21:19 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 14)

16:21:19 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xffffff9e, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:21:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
mount_setattr(r0, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000000c0)={0x84, 0x72, 0xc0000}, 0x20)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:21:19 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {0x0}], 0x2)

16:21:19 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:21:19 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:21:19 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf46)

16:21:19 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x8, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2626.441922] FAULT_INJECTION: forcing a failure.
[ 2626.441922] name failslab, interval 1, probability 0, space 0, times 0
[ 2626.443443] CPU: 1 PID: 31265 Comm: syz-executor.1 Not tainted 6.2.0-next-20230224 #1
[ 2626.444464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2626.445524] Call Trace:
[ 2626.445897]  <TASK>
[ 2626.446206]  dump_stack_lvl+0xc1/0xf0
[ 2626.446732]  should_fail_ex+0x4b4/0x5b0
[ 2626.447293]  ? jbd2__journal_start+0x194/0x6b0
[ 2626.447930]  should_failslab+0x9/0x20
[ 2626.448458]  kmem_cache_alloc+0x5a/0x320
[ 2626.449017]  jbd2__journal_start+0x194/0x6b0
[ 2626.449631]  __ext4_journal_start_sb+0x4c2/0x6f0
[ 2626.450288]  __ext4_new_inode+0x2e79/0x55f0
[ 2626.450900]  ? __pfx___ext4_new_inode+0x10/0x10
[ 2626.451551]  ? do_raw_spin_unlock+0x53/0x220
[ 2626.452152]  ? d_splice_alias+0x4eb/0xe30
[ 2626.452719]  ext4_create+0x2e4/0x4e0
[ 2626.453248]  ? __pfx_ext4_create+0x10/0x10
[ 2626.453837]  ? __pfx_ext4_create+0x10/0x10
[ 2626.454407]  lookup_open.isra.0+0x1032/0x1400
[ 2626.455037]  ? __pfx_lookup_open.isra.0+0x10/0x10
[ 2626.455684]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 2626.456364]  ? path_openat+0x916/0x2750
[ 2626.456907]  ? lock_acquire+0x32/0xc0
[ 2626.457435]  ? path_openat+0x916/0x2750
[ 2626.458006]  ? __pfx_down_write+0x10/0x10
[ 2626.458565]  ? __mnt_want_write+0x1f4/0x2e0
[ 2626.459158]  path_openat+0x97c/0x2750
[ 2626.459711]  ? __pfx_path_openat+0x10/0x10
[ 2626.460281]  ? __pfx___lock_acquire+0x10/0x10
[ 2626.460901]  ? __create_object+0x3ee/0xc90
[ 2626.461487]  do_filp_open+0x1ba/0x410
[ 2626.462020]  ? __pfx_do_filp_open+0x10/0x10
[ 2626.462607]  ? find_held_lock+0x2c/0x110
[ 2626.463174]  ? do_raw_spin_lock+0x125/0x270
[ 2626.463760]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2626.464376]  ? lock_acquire+0x32/0xc0
[ 2626.464905]  ? alloc_fd+0x6e/0x760
[ 2626.465403]  ? _raw_spin_unlock+0x1e/0x40
[ 2626.465979]  ? alloc_fd+0x2eb/0x760
[ 2626.466499]  do_sys_openat2+0x171/0x4c0
[ 2626.467039]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2626.467749]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2626.468377]  __x64_sys_creat+0xcd/0x120
[ 2626.468926]  ? __pfx___x64_sys_creat+0x10/0x10
[ 2626.469552]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2626.470269]  do_syscall_64+0x3f/0x90
[ 2626.470783]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2626.471457] RIP: 0033:0x7f8434168b19
[ 2626.471953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2626.474195] RSP: 002b:00007f84316de188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[ 2626.475171] RAX: ffffffffffffffda RBX: 00007f843427bf60 RCX: 00007f8434168b19
[ 2626.476086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100
[ 2626.476993] RBP: 00007f84316de1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2626.477923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2626.478829] R13: 00007ffe1166621f R14: 00007f84316de300 R15: 0000000000022000
[ 2626.479770]  </TASK>
[ 2626.481486] EXT4-fs error (device sda) in __ext4_new_inode:1084: Out of memory
16:21:19 executing program 2:
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:21:19 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {0x0}], 0x2)

[ 2626.494813] loop3: detected capacity change from 0 to 40
[ 2626.500668] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:21:19 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:21:19 executing program 2:
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:21:19 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf48)

16:21:19 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {0x0}], 0x2)

[ 2626.597747] syz-executor.3: attempt to access beyond end of device
[ 2626.597747] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2626.599401] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:21:19 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xfffffff0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2626.644860] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:21:19 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

16:21:19 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 15)

16:21:19 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf4a)

[ 2639.612327] FAULT_INJECTION: forcing a failure.
[ 2639.612327] name failslab, interval 1, probability 0, space 0, times 0
[ 2639.613323] CPU: 1 PID: 31407 Comm: syz-executor.1 Not tainted 6.2.0-next-20230224 #1
[ 2639.613854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2639.614420] Call Trace:
[ 2639.614599]  <TASK>
[ 2639.614768]  dump_stack_lvl+0xc1/0xf0
[ 2639.615042]  should_fail_ex+0x4b4/0x5b0
[ 2639.615324]  ? sidtab_sid2str_get+0x69/0x700
[ 2639.615643]  ? sidtab_sid2str_get+0x180/0x700
[ 2639.615955]  should_failslab+0x9/0x20
[ 2639.616225]  __kmem_cache_alloc_node+0x5b/0x310
[ 2639.616548]  ? sidtab_sid2str_get+0x180/0x700
[ 2639.616859]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2639.617201]  ? sidtab_sid2str_get+0x180/0x700
[ 2639.617512]  __kmalloc_node_track_caller+0x43/0xb0
[ 2639.617854]  kmemdup+0x2c/0x60
[ 2639.618104]  sidtab_sid2str_get+0x180/0x700
[ 2639.618411]  sidtab_entry_to_string+0x33/0x110
[ 2639.618736]  security_sid_to_context_core+0x341/0x610
[ 2639.619093]  selinux_inode_init_security+0x4cb/0x6b0
[ 2639.619450]  ? __pfx_selinux_inode_init_security+0x10/0x10
[ 2639.619826]  ? __pfx_get_cached_acl+0x10/0x10
[ 2639.620147]  ? lock_release+0x1e3/0x710
[ 2639.620440]  security_inode_init_security+0x155/0x360
[ 2639.620795]  ? __pfx_ext4_initxattrs+0x10/0x10
[ 2639.621121]  ? __pfx_security_inode_init_security+0x10/0x10
[ 2639.621510]  ? chksum_update+0x50/0xb0
[ 2639.621799]  __ext4_new_inode+0x3900/0x55f0
[ 2639.622124]  ? __pfx___ext4_new_inode+0x10/0x10
[ 2639.622461]  ? do_raw_spin_unlock+0x53/0x220
[ 2639.622770]  ? d_splice_alias+0x4eb/0xe30
[ 2639.623063]  ext4_create+0x2e4/0x4e0
[ 2639.623337]  ? __pfx_ext4_create+0x10/0x10
[ 2639.623638]  ? __pfx_ext4_create+0x10/0x10
[ 2639.623929]  lookup_open.isra.0+0x1032/0x1400
[ 2639.624248]  ? __pfx_lookup_open.isra.0+0x10/0x10
[ 2639.624578]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 2639.624934]  ? path_openat+0x916/0x2750
[ 2639.625213]  ? lock_acquire+0x32/0xc0
[ 2639.625483]  ? path_openat+0x916/0x2750
[ 2639.625773]  ? __pfx_down_write+0x10/0x10
[ 2639.626077]  ? __mnt_want_write+0x1f4/0x2e0
[ 2639.626382]  path_openat+0x97c/0x2750
[ 2639.626670]  ? __pfx_path_openat+0x10/0x10
[ 2639.626970]  ? __pfx___lock_acquire+0x10/0x10
[ 2639.627287]  ? __create_object+0x3ee/0xc90
[ 2639.627593]  do_filp_open+0x1ba/0x410
[ 2639.627869]  ? __pfx_do_filp_open+0x10/0x10
[ 2639.628166]  ? find_held_lock+0x2c/0x110
[ 2639.628460]  ? do_raw_spin_lock+0x125/0x270
[ 2639.628760]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2639.629085]  ? lock_acquire+0x32/0xc0
[ 2639.629362]  ? alloc_fd+0x6e/0x760
[ 2639.629624]  ? _raw_spin_unlock+0x1e/0x40
[ 2639.629923]  ? alloc_fd+0x2eb/0x760
[ 2639.630203]  do_sys_openat2+0x171/0x4c0
[ 2639.630497]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2639.630872]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2639.631210]  __x64_sys_creat+0xcd/0x120
[ 2639.631509]  ? __pfx___x64_sys_creat+0x10/0x10
[ 2639.631840]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2639.632206]  do_syscall_64+0x3f/0x90
[ 2639.632468]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2639.632815] RIP: 0033:0x7f8434168b19
[ 2639.633069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2639.634248] RSP: 002b:00007f84316de188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[ 2639.634746] RAX: ffffffffffffffda RBX: 00007f843427bf60 RCX: 00007f8434168b19
[ 2639.635243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100
[ 2639.635722] RBP: 00007f84316de1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2639.636194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2639.636694] R13: 00007ffe1166621f R14: 00007f84316de300 R15: 0000000000022000
[ 2639.637183]  </TASK>
16:21:32 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 16)

16:21:32 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

16:21:32 executing program 2:
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:21:32 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x84000)
sendfile(r2, r3, &(0x7f0000000180)=0x1, 0x9)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:21:32 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xf, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:21:32 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0xffffffff, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:21:32 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf4f)

16:21:32 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 2639.669688] loop3: detected capacity change from 0 to 40
16:21:32 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 17)

16:21:32 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

[ 2639.731808] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2639.756567] syz-executor.3: attempt to access beyond end of device
[ 2639.756567] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2639.757401] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2639.801755] syz-executor.3: attempt to access beyond end of device
[ 2639.801755] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2639.802659] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:21:45 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 18)

16:21:45 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf51)

16:21:45 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x67, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:21:45 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:21:45 executing program 2:
r0 = syz_open_procfs(0x0, 0x0)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:21:45 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:21:45 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:21:45 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

[ 2652.377461] FAULT_INJECTION: forcing a failure.
[ 2652.377461] name failslab, interval 1, probability 0, space 0, times 0
[ 2652.378944] CPU: 1 PID: 31550 Comm: syz-executor.1 Not tainted 6.2.0-next-20230224 #1
[ 2652.379894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2652.380072] loop3: detected capacity change from 0 to 40
[ 2652.380858] Call Trace:
[ 2652.380868]  <TASK>
[ 2652.380879]  dump_stack_lvl+0xc1/0xf0
[ 2652.382630]  should_fail_ex+0x4b4/0x5b0
[ 2652.383150]  ? ext4_inode_attach_jinode+0x118/0x230
[ 2652.383777]  should_failslab+0x9/0x20
[ 2652.384269]  kmem_cache_alloc+0x5a/0x320
[ 2652.384795]  ext4_inode_attach_jinode+0x118/0x230
[ 2652.385416]  ext4_file_open+0x2f6/0xbb0
[ 2652.385921]  ? __pfx_ext4_file_open+0x10/0x10
[ 2652.386551]  ? __pfx_selinux_file_open+0x10/0x10
[ 2652.387153]  ? __pfx_lock_release+0x10/0x10
[ 2652.387730]  ? fsnotify_perm.part.0+0x221/0x610
[ 2652.388335]  do_dentry_open+0x6ca/0x12b0
[ 2652.388852]  ? __pfx_ext4_file_open+0x10/0x10
[ 2652.389424]  ? may_open+0x1f3/0x420
[ 2652.389909]  path_openat+0x18ad/0x2750
[ 2652.390445]  ? __pfx_path_openat+0x10/0x10
[ 2652.390991]  ? __pfx___lock_acquire+0x10/0x10
[ 2652.391580]  ? __create_object+0x3ee/0xc90
[ 2652.392137]  do_filp_open+0x1ba/0x410
[ 2652.392651]  ? __pfx_do_filp_open+0x10/0x10
[ 2652.393213]  ? find_held_lock+0x2c/0x110
[ 2652.393751]  ? do_raw_spin_lock+0x125/0x270
[ 2652.394312]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2652.394914]  ? lock_acquire+0x32/0xc0
[ 2652.395417]  ? alloc_fd+0x6e/0x760
[ 2652.395901]  ? _raw_spin_unlock+0x1e/0x40
[ 2652.396446]  ? alloc_fd+0x2eb/0x760
[ 2652.396939]  do_sys_openat2+0x171/0x4c0
[ 2652.397459]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2652.398158]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2652.398755]  __x64_sys_creat+0xcd/0x120
[ 2652.399277]  ? __pfx___x64_sys_creat+0x10/0x10
[ 2652.399878]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2652.400559]  do_syscall_64+0x3f/0x90
[ 2652.401046]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2652.401698] RIP: 0033:0x7f8434168b19
[ 2652.402184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2652.404381] RSP: 002b:00007f84316de188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[ 2652.405313] RAX: ffffffffffffffda RBX: 00007f843427bf60 RCX: 00007f8434168b19
[ 2652.406197] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100
[ 2652.407078] RBP: 00007f84316de1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2652.407950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2652.408829] R13: 00007ffe1166621f R14: 00007f84316de300 R15: 0000000000022000
[ 2652.409719]  </TASK>
[ 2652.431834] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:21:45 executing program 2:
r0 = syz_open_procfs(0x0, 0x0)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

[ 2652.528531] syz-executor.3: attempt to access beyond end of device
[ 2652.528531] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2652.530502] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:21:45 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf53)

16:21:45 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x5, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:21:45 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x2, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2652.611085] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:21:45 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 19)

16:21:45 executing program 2:
r0 = syz_open_procfs(0x0, 0x0)
readv(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:21:45 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf55)

16:21:45 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf46)

16:21:45 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
write$binfmt_aout(r0, &(0x7f0000000180)={{0x107, 0x1f, 0x4, 0x2ff, 0x361, 0xda5, 0x179}, "47e06217099e9cf6b1ca037ef00818c7fbaa7331f343bf276d76b3bb8d805012e569387b3645f50d68c3ee526b70a0f96830038ad366a1cdf9ca16641822e1e20b5f71d9fd16b33995a73756fc4e921a6488503022cde2d1d731ba1385ab77318aafd1c5c07afa8e32d4cb8e0365460e0849c77e0444d4ef3dbcb1cf36b6607d4879a7d93eae63d48a57bc1fa779c743472e12476decb69afcf65d3f8ba618be1b7841e090a4145b8693eb1fb647fc5a49f087030b080c6be372ba8c7de1d1f4aa39341a0c1db5bb539c1016f0c8116a9820ad03e0cb6e4624b7aa5bfd7ad6e568066c7d5c1446cb0530b6196a909281ef94b86db1", ['\x00', '\x00', '\x00']}, 0x415)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[ 2652.729632] loop3: detected capacity change from 0 to 40
16:21:45 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 2652.883763] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:21:59 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 20)

16:21:59 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:21:59 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xf0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2666.269827] FAULT_INJECTION: forcing a failure.
[ 2666.269827] name fail_usercopy, interval 1, probability 0, space 0, times 0
16:21:59 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

[ 2666.271384] CPU: 0 PID: 31695 Comm: syz-executor.1 Not tainted 6.2.0-next-20230224 #1
[ 2666.272415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2666.273399] Call Trace:
[ 2666.273732]  <TASK>
[ 2666.274023]  dump_stack_lvl+0xc1/0xf0
[ 2666.274554]  should_fail_ex+0x4b4/0x5b0
[ 2666.275078]  _copy_to_user+0x2e/0x150
[ 2666.275589]  simple_read_from_buffer+0xd0/0x170
[ 2666.276235]  proc_fail_nth_read+0x19c/0x230
[ 2666.276795]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2666.277438]  ? security_file_permission+0xb5/0xe0
[ 2666.278071]  vfs_read+0x257/0x940
[ 2666.278570]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2666.279194]  ? __pfx_vfs_read+0x10/0x10
[ 2666.279741]  ? __pfx___fget_files+0x10/0x10
[ 2666.280306]  ? __fget_files+0x270/0x480
[ 2666.280861]  ksys_read+0x12b/0x260
[ 2666.281342]  ? __pfx_ksys_read+0x10/0x10
[ 2666.281912]  do_syscall_64+0x3f/0x90
[ 2666.282403]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2666.283078] RIP: 0033:0x7f843411b69c
16:21:59 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x3, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:21:59 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x2, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2666.283537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2666.285870] RSP: 002b:00007f84316de170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2666.286871] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f843411b69c
[ 2666.287795] RDX: 000000000000000f RSI: 00007f84316de1e0 RDI: 0000000000000003
[ 2666.288716] RBP: 00007f84316de1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2666.289639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2666.290564] R13: 00007ffe1166621f R14: 00007f84316de300 R15: 0000000000022000
[ 2666.291497]  </TASK>
16:21:59 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf57)

16:21:59 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
write(r0, &(0x7f0000000180)="52e64ec4ad2d6bf71674f96590d3d8df2e674a91d662cb3538e733d76abca6cf8aa439bb5d6d609fac840de2bc47d27a6d537ba6745b87d3e7c09a934a26a7abcd4f9b0438cb3dbad8cbdc74d1c63833842b65e39dbc44bef60caa71a0c9c44ce687a8c688c53c0edb5abb2973e3ee42d199498b5adde858d4d3e5ca25b3e9481f161c18f550914c07e4dfb9bb61332891ca7791c60a3a8132dbb6283165f74932b621366f794ec9e457036e0b1388016d31cfe66fe93a332a1c364a5bb06841054374b1222554e1e9f5a7be763647ec6fcecb14be67735a360dbf", 0xdb)
pread64(r3, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
openat(r3, &(0x7f0000000040)='./file2\x00', 0x4000, 0x110)
sendfile(r2, r1, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[ 2666.336393] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2666.345303] loop3: detected capacity change from 0 to 40
16:21:59 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf59)

16:21:59 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:21:59 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:21:59 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 2666.478335] syz-executor.3: attempt to access beyond end of device
[ 2666.478335] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2666.480004] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:21:59 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0)

16:21:59 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x4, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2666.567907] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2666.571354] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2666.573193] syz-executor.3: attempt to access beyond end of device
[ 2666.573193] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2666.574920] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:21:59 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf69)

16:21:59 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/179, 0xb3}], 0x2)

16:21:59 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:21:59 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[ 2666.757042] loop3: detected capacity change from 0 to 40
[ 2666.774394] loop7: detected capacity change from 0 to 40
[ 2666.818599] syz-executor.3: attempt to access beyond end of device
[ 2666.818599] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2666.820179] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2666.845969] syz-executor.7: attempt to access beyond end of device
[ 2666.845969] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2666.847647] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2666.855091] syz-executor.3: attempt to access beyond end of device
[ 2666.855091] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2666.856661] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:22:12 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x2)

16:22:12 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x21e, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:22:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setxattr$security_evm(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@sha1={0x1, "648a84342c22fad9df7d7b9df6bdc51704592124"}, 0x15, 0x1)

16:22:12 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf79)

16:22:12 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:22:12 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x5, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:22:12 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, 0x0, 0x0)

16:22:12 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:22:12 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x3)

[ 2679.392884] loop7: detected capacity change from 0 to 40
[ 2679.407711] loop3: detected capacity change from 0 to 40
[ 2679.418417] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:22:12 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf89)

[ 2679.501895] syz-executor.3: attempt to access beyond end of device
[ 2679.501895] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2679.503655] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:22:12 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xa, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 2679.538410] syz-executor.7: attempt to access beyond end of device
[ 2679.538410] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
16:22:12 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, 0x0, 0x0)

[ 2679.540126] Buffer I/O error on dev loop7, logical block 10, lost async page write
16:22:12 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x6, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:22:12 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x4)

[ 2679.636852] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:22:12 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf9e)

16:22:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[ 2679.791898] FAT-fs (loop3): bogus number of reserved sectors
[ 2679.792741] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2680.263096] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value
16:22:27 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, 0x0, 0x0)

16:22:27 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xb, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:22:27 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:22:27 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x7, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:22:27 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x5)

16:22:27 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xfa3)

16:22:27 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x600, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2693.903079] loop3: detected capacity change from 0 to 40
16:22:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3, 0x7, 0x0, 0x4, 0x0, 0x6, 0x21, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x6, @perf_bp={&(0x7f00000000c0), 0xa}, 0x1000, 0xe1, 0x1ff80000, 0x0, 0x10001, 0x80000000, 0x4, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x5, r0, 0x1)
r3 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r4, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
accept(r4, &(0x7f0000000240)=@x25={0x9, @remote}, &(0x7f00000002c0)=0x80)
ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x0)
fcntl$notify(r3, 0x402, 0x28)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f6669090031207666617400200100000000000000c1cb236a449d7a4f987be1a5d26e407400205c2b207666610800000000000000"], 0x22)

[ 2693.935729] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2693.946787] loop7: detected capacity change from 0 to 40
16:22:27 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x6)

16:22:27 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

16:22:27 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xfac)

16:22:27 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x8, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2694.013738] syz-executor.3: attempt to access beyond end of device
[ 2694.013738] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2694.015976] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:22:27 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x10, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:22:27 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

16:22:27 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x7)

[ 2694.068790] syz-executor.7: attempt to access beyond end of device
[ 2694.068790] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2694.070542] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2694.102963] syz-executor.3: attempt to access beyond end of device
[ 2694.102963] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2694.105126] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2694.133696] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:22:40 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xfb3)

16:22:40 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xf00, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:22:40 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

16:22:40 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:22:40 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x9, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:22:40 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:22:40 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x410, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="c66edac483b3e0132bd6423eebe8f834e5815f7bf81d3a67ebe5ab459e4b1b29ea55de262007ffffd5a10c0161aa643feb1209488cc0eb09371c040a5bb4d3ae3bc41803e65a8259b91efc7e0ccaa96f2e4ef6e17898cc6741c846d58425617fcc4642c4e36eddcff613a507bfc3aa2ec1326f7c3b03ebda55431a5089fb979b4fd93ba76a30230b08cc1f6d67af56cd0953baaa2042a2ad31ecc548c2080669a0af05c061b315cff94dc2042c21785a0a"])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
openat(r0, &(0x7f0000000240)='./file1\x00', 0x20100, 0x15d)
openat(r1, &(0x7f0000000040)='./file1\x00', 0x76d943, 0x64)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6c5a7cb374e0edf2, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f00000000c0)={0xff, 0x8, [0x400040000000, 0xffffffffffffffec, 0x9], &(0x7f0000000000)=[0x0]})
r3 = syz_open_dev$usbmon(&(0x7f0000000280), 0x6, 0x200100)
sendfile(r3, r1, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:22:40 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x8)

[ 2707.266791] loop7: detected capacity change from 0 to 40
16:22:40 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xc)

[ 2707.271117] FAT-fs (loop3): Unrecognized mount option "������" or missing value
[ 2707.291002] FAT-fs (loop3): Unrecognized mount option "������" or missing value
16:22:40 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xfb5)

16:22:40 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[ 2707.338029] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:22:40 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xf, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:22:40 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x10)

[ 2707.386641] syz-executor.7: attempt to access beyond end of device
[ 2707.386641] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2707.388493] Buffer I/O error on dev loop7, logical block 10, lost async page write
16:22:40 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {0x0}], 0x2)

[ 2707.424096] loop3: detected capacity change from 0 to 40
16:22:40 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x24, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:22:40 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x12)

16:22:40 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2707.554662] syz-executor.3: attempt to access beyond end of device
[ 2707.554662] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2707.556419] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2707.560950] loop7: detected capacity change from 0 to 40
[ 2707.591576] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2720.120074] loop3: detected capacity change from 0 to 40
16:22:53 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x18)

16:22:53 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:22:53 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mount$9p_unix(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x8800, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d756e69782c7072694b126f72742c66736e616d653d2c736d61636b6673726f6f743d9f27202f23252c5b2c66756e633d504154485f434845434b2c7375626a5f726f6c653d76666174"])
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat(r4, &(0x7f0000000180)='./file1\x00', 0x840, 0x21)

16:22:53 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {0x0}], 0x2)

16:22:53 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x1e02, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:22:53 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x43, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:22:53 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xfc2)

[ 2720.135529] loop7: detected capacity change from 0 to 40
16:22:53 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xf0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2720.181653] 9pnet_fd: p9_fd_create_unix (32302): problem connecting socket: ./file2: -2
16:22:53 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xfc4)

16:22:53 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2720.206018] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2720.210357] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:22:53 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x20d, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:22:53 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x24)

16:22:53 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}, {0x0}], 0x2)

16:22:53 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x300, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 2720.274053] 9pnet_fd: p9_fd_create_unix (32302): problem connecting socket: ./file2: -2
[ 2720.282804] loop7: detected capacity change from 0 to 40
16:22:53 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1, 0x10)
sendfile(r2, r1, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:22:53 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xfc6)

16:22:53 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x2e)

16:22:53 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

[ 2720.402110] loop3: detected capacity change from 0 to 40
[ 2720.404845] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2720.456140] syz-executor.3: attempt to access beyond end of device
16:22:53 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2720.456140] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2720.457252] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:22:53 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

[ 2720.540751] loop7: detected capacity change from 0 to 40
16:23:06 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xfc8)

16:23:06 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x28b, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:23:06 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xc0)

16:23:06 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x6700, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:23:06 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:23:06 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x48d, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:23:06 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

16:23:06 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
recvmmsg$unix(r0, &(0x7f0000004040)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}, {&(0x7f0000000280)=""/129, 0x81}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0004000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x88}}, {{&(0x7f0000000400), 0x6e, &(0x7f0000001540)=[{&(0x7f0000000480)=""/32, 0x20}, {&(0x7f00000004c0)=""/91, 0x5b}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x3, &(0x7f0000001580)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f00000015c0)=@abs, 0x6e, &(0x7f00000028c0)=[{&(0x7f0000001640)=""/10, 0xa}, {&(0x7f0000001680)=""/35, 0x23}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/221, 0xdd}, {&(0x7f00000027c0)=""/204, 0xcc}], 0x5, &(0x7f0000002940)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}, {{&(0x7f0000002a80)=@abs, 0x6e, &(0x7f0000002c00)=[{&(0x7f0000002b00)=""/225, 0xe1}], 0x1, &(0x7f0000004200)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000002c80), 0x6e, &(0x7f0000003e80)=[{&(0x7f0000002d00)=""/196, 0xc4}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/125, 0x7d}], 0x3, &(0x7f0000003ec0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}], 0x5, 0x2, &(0x7f0000004180)={0x0, 0x3938700})
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xc1, 0xf4, 0x8, 0x3a, 0x0, 0x15960000000000, 0x8800, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xd9, 0x2, @perf_config_ext={0x6, 0x2b11}, 0x8800, 0x1000000000000000, 0x9, 0x4, 0x5, 0x40, 0x6, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
inotify_add_watch(r3, &(0x7f00000041c0)='./file1\x00', 0x210)

[ 2733.370331] loop7: detected capacity change from 0 to 40
[ 2733.381686] loop3: detected capacity change from 0 to 40
[ 2733.394359] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:23:06 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xfca)

16:23:06 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xf0)

[ 2733.498357] syz-executor.3: attempt to access beyond end of device
[ 2733.498357] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2733.499965] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:23:20 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
readv(r0, &(0x7f0000000880)=[{0x0}], 0x1)

16:23:20 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaa42, 0x9, &(0x7f0000002640)=[{&(0x7f0000000180)="aa0fb5446bd839fae58076a9ce8ae00a13d35b544e8d5c5b6e92846ef6b5de9f8ab0dcecf2d5688575654d0a2c5e1a6182595831c31cbdd9", 0x38, 0x7}, {&(0x7f00000001c0)="e8679aa6016e2ffc61763c594069c3f0f8f270fa2862b10aabe65e94ed05d77629e7b8fe261a0fb96a83f4bf6abf4b7c84537abbcda67a5eb6bde12427d42a69560994252b239fc0aed9c52f6e1fb0397a5549430c14d157552d982f3969ec1eb37b06e77471a627e6c52ed06d658991fdb42e5f17d25cc3a69c1cfc02f1182c8086ed4cd43277e99c09ddd974bd78a852cd580d5987635dd531d8fb27451f06895e47cea142b141cbc5577f7bbc469ca08d0d3886", 0xb5, 0x2}, {&(0x7f0000000280)="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", 0x1000, 0x7}, {&(0x7f0000001280)="923eb08c247f66bc45dce41ca3a3bfbd6e8723786f533a3c432df077156aa1b50b74e6cde5b6ae2d42656a1a891a2fb158745a0b2f387bc16a9f18c6c0ff528b39cb75d1f2a9fe8e8f732e8c4d79a3a8f134358b68a87f1e478bc183142ad51fad5aec86522c9effc01f5930376d44119a1a5331284db6962f8aa96f8dc9d1c72cd80592d52c42a40327045062e0f78d3150a34d45b5ab31dddfcdadf97a836e4414bb838b6ac17ad847561fab3d1c983f5d9aa6d13dbcaae8d7ee9a5699d3dd9101e8501899495573d5e1b35997752139afa62c2fd14eed918885e92a842fd59d4cb0f008b7cc4c249e3b16daef98494ac676f57ba54edd857a19127781f8228dbd774a2aa6330afaa737c858b846def5f04330f8e7522c5989169fda84bece6ddd904ec950080693dae01e25c8512ff3a86dd0b1c83d640958c9733cf80f886e1410873e4d6588bd9588bd7fbc468f42fcafe6df83d46feb311028646bbb6b69b25a977fe6803bb02d6a3cb3884f7bd6adeffabaaeecc389089dee95a02ff8282601f42a95cc6a5a7f39cd5ae356226112308e772fa57459db2d7d23cbfb9a1e22d3e6409cf779ea26e7120d038f84e5ae4905e065d02646b19c0a8f5ac6b9a23183ae5f1801100f48b7fa99405415dae533ae02f4f51e209f8b114f07c4b84679ac58e49fbbb4a6364b5dcad9a38e53629e8601eb8b7738389cf7609d72b7801c5de73cca4e93c82e1cb9c7633e20fb0c03a52352d835f2171ab637046bf4d376e0169ce1ac070a64c48127854dca9d2dfac3e782b8eb2f7876ee1eb4faf56139c3d8cfa2828738388b5c87ce6a3fbd4d57cd6a1d6b35308f6b153d4aa4d8cdf389d366463f1a4ccf4db4cc24282af28d2acaebba22c469a0a580a6543e5af0bc7bd4b069db2e29f3222709c551876d8331312ca65636097246f9cdad6f90eed6e3223776bd35e788687bf6c673eccf54ae3b8ec0bb3e05aba9fb3ce3233cded1359c327f659146a0e2d478d46b61d4f562abfc15ae309ab9b844c36a0881eedf7709db4599f84524efeef24695f608eac6f20e90d0999474e445d84d48e7a30ee62af0c26563be8f5847357d35b2141ac22f25f975366bb7c972539b41cf22e35d1c3e6ca84b0bd3cb734eac25a4a37aa20fe8eacf3e8f8f4def06565beb174d1d027ab4cfdd896a8e51ddb6fd44bbd72e3f7d1e800801514b03dd7ff0f8fd349882749d2865dc6857c4ce832899c8112482bbb87299a3636e27388af2950883dbf41af3c1b69e49bfca48f78432035d8d2d9ceecde587f2665e1f194ec09b7d0a6f7f912e14cc9230c5b6133cb18d9ebdc3a50ce6a866f8b1cde6b232dd9f2aec2d220ffc6b6c6fe75d838b5ef9eaceccef4a1e43ee99e38e7875a7cd9487d5e98c40c88009b0d48613281a8d69941e6eef3881b9f3d472a212b9ede1b418dcd0078e0509babf7b86f14967d12d96ec14c78fc1e9ac145b9ae7a2fb36d8e397c92147260a857f22b162b3a8b01bb556915f10338bc8eb96e51a7b12646c1e50d387afa49f7674dbed17c8a9e5ae4eb6d31eee052b08152662eeee506e7d6018bf6b09ccb149361e0b13671ca0eb0500dabbd44cd31a7df61e8ec83977fb0fa928c06467bf7dfd68e496ad86558fc30246c377d3def02e1438dd7e42ece56bc7355ccf1e76051d134eed2c8a580b0ef34b748deac65fa438a86e0f5aec0aa516712309e5263278b4ac7df10fdd246acaf4d7e744d3650b11f08eb2c2e64eb565a37d58264d6ce2bb0b973dc62f3b17b807153397ff897cf7ce54c097aa7b407740a566f5b6a17b3dee98d92cdab008c7185fc74a440e666876c3d46ca4b0ffcb884646f4522f4cf73012bc0d5c0ace4643c537f657a43e376775cdbc299efb2d5f6da4aa2cd0edda85d76010096d56e442e117803d33eb5820c564109188bd34e0c4e15368ea986e6e976b230283982247e4657f021c0000905eaea8ecc3ce621c19287c98deee486a6d3bedde1b76b2b910ab33a64f0c4a57eaed09726cdde105c17846b0685abd6515947b86a8bd9a06b37a4f26775769172c6d1c82553fa675bf12b650a3c7fbfc76f138f3b41bc9992ddc7c7ec995e6dce508e4a5e5a745be0fcba8fa71afcbdb388636f4e9ac4392406c260cd55e48192ab08b87cbb9212886a761accb1cadbd8467fd49371afe3be6b14c9e1d992d0ad44a0b0a79daf4f43a6ec3b5b17e4ec5fa4f33658e7eccbad3658ae3eb13db6fa5b989a1e3e0b8d2848eb7000879c54b90905a25bdbc691c98ee5e9d00438fed3ec442c5224926ebd0e6203afcaf714a692d363e2775d1fb6f85cbff7d4632551093a2fbe61b61438f0b6f04813fb26244075fc3a11960c12d4cb3458375d362e580a059fc6b493968b54aaa1b2af9622094d3b8c022b0fff3c7a44fc68fbdac536602f9e6c17c060f7f2c985d95627c7e480e0887561962490ce5d1cd99e68ac4b06933035e4389fd959bf97b327a7d8a6c5e7468e8ee0935e2aa982986e7a85a7b731b5fb1e1a0625fe22c29e9ad3646b4099695be0496b6716ec15003c41bcddf5307ef4e8b2144cbd87e16d145abfbe428307443ceccdc7e4129c1c26fdc78bc36821bf4224a13fab2f6c5a61f72ac6ce8c4b89ce7ce061c8d417cff47190c283ad66635fd0f838ea5ff193d3128c76b9ff2cde96185b31b2a2fa06526351ed5d1e73ef3fe174264d8fb4c747744121eefacca2c5e277b86631443b9a7282f0030febecf79cd66d77984325efaaac3f6890dafe1ad2a50e8f37e95744bbfc630255b75f40375e147308fe834fe5418776985910908606b8f8149995e26c12b2634d1d6ea72328bc6a5c4bf160453c5b28f84aab5175434313beb06c68a646a93decb5149edb0817c9313f3e6ecfd3cd5011bd9fab7941bb28559849300d9a463375ed63c34c3a86cc212894b003b0c05d30823b8e8b9fdc14aa214fdae2ab4df890dd8ba02de978579b3d98c9ea763aeb11f2e5e8762b63a0688550ec0492338f3b37ddac46e7568c8595d29bdcb81097272f06470e3c1cf2cc29846470573d37518cdc2de9bf377d1dbaeef2b2084523b5f660aaed17dcc47c30e27e31cfe9bc0d38c82ffe3b632866b8d080537b88a26eebb27ec11bcc57479c7c24c396f05bbab57d6cd7e107123ef2e07beb4ecfd6f4dd147f073fbac46add51a8a0fe7ba734fa0f34d986cdb9303894bc06bc88aead6ea37aca07f3f0c29399278e9d4660b8ceff3ef7f0a7fdb5615ff28aaf83d4b9eee0249e17725cc59a2b09340643fcee8dc5500c714474be3efe70f7e22b26bbfb4f09e7ed08d3e90ac6fd6c4ec7639d6666642e54e99bbc6d48e7a38961253f1f5c7c338c0421ea23ac135f823d6ca11d00ffee9c199673071034507fe2ccf897282707ae0e429185d22458aabd41161c17c86b5af994e4394ddf243e99b03ea5c9c8ebb1a35a0929e1dcca3ddbad457548854c2cb2fc30d6a2d999088e760796f735005ff4373026bd522115ff3618c23b8376f9f61c48eb7f8ea13a50ef88994b95c81993ba1c455543cdd8abde5ad40cf5f32d7d3a793224c5f9c2dd7673d7cff1bc81ecfefd7bd3073f06bf989a9a663051277f8c33e87333d3cdf5d74bb6d9d1d3f68fdfe71ca60bfefdb1e99c193f1772a28a7b4b48ea105abb8cdc460f2e5b66c569591e44115a93ba5578342a9272229447552fda6b0c39c767bfae38c7dbb77178a85c18c5ef3e5cb74dea43ae37744b45355118926be72ce25f2a30b88a41a9c47f3ebc372dde96a368ba5c5a64518e7a2f6b2645d5d528f7edd3419aa368477fa3b62414208a62273a8dba45f7a264093e87a1f3dc52f528eda02b6dbea0bfcd2b8191b2b77bdc97c9bde5334e2c66dc89cd02c28a1a31bd16652f1939cf83ecc245cd4fffe5de61b27c54b725450f86b1750b38175c12fc61d4bb7eea1dcff1f97b6ba06695d38edaaf3c07ce2d1faa43b7de0c2682c7b92e744d19275c1d8ec728b01d46dac419b08cb923b1b2eb18bed2c788915aced4a6b6a08836472d76f558acf18b0ec652b1d64533f7e2247ea991a30028072c5902e6d7956c7a269509e8b901f9997028208ead67bfdc6f6f3e19ac1b508ec231613cca784c4ef6a81adf8c21c6622b19c0dcff80c4fb861e72ae2d2d3f0ff9bd6f63f95642416a62532a2223a2149c8c854439b5c8f851e32c00ff1bb7a9fb976649ea367973b695e36233b5535e8061c9fab12b5c5aba564022a1c613276e998060d60c4afc2aa97e1f9f371b24c782c3327ce77494c918c10b93ac742e8f8ea058361da2e6f8599fdb66d7f25527c031d71d30cb06d0cc32c02e45397f24599671a671081e2146ea7a75202d4c71fdc1f0bfd080115239c7a2a83ebe712bb39249c84eebcb56a524f4380b566a069d2f7ab3a68b63c457f0278d72eb5dec4cd699a646e089cf137c1564ba4f3ec6b4e39d4d17e693f9b2d8f26bfcd5b79f4763e7687f4bb65c3f464acfb80a4e40abcd7a6bd1eaeec961f353b9ac7c81ff076fc00b5ae78a64ef3cb6cf87b0e96561f18a067b88e698bf823d952e5d698c5c2abe1c157d3a70fa3f34c6ee5a14614971b9f811aac4c8fbe70c049f9c7040df8c0ab34b7cf61f2984fc59cf94a9dac743ecbb4a6dc9664a149465650c442ca56604cd205fbc046ccef51fb436d655ba1c6a9e3db016e036e131df333ae77e15706d34dbd18ad3fc5dc482d5c11606fe077ba4e49d6efabb13ed4cff3a6ef99852e109f9a0040e247f94f2a8249ce2de2ff700fd93eb42082a202c4f5769667871daf9adb44b65cdd36bc7f408ceecc6fc02916473f02412cb5a119b3d06e7e53930a664740412c0eb890fb2c7a9d14fd42d0b1a3236cf0b020dd35112c912e7527e02a2291865becaa04544ab42e4a0eda504033d0bf90e80efc6f79edd426858d91f62f5bf7ba2a84b4f9ec7dd91bcdac825cbe1dc99af03db50277d1c45d2763c223460917cd3cb732ddb01c79a01bc8b8b7837030481d7b22998df8e673a2b4d430d9bc83bc97436b80789a8c0a1f9afca8618a19f207dce00c76e227dbc04069117a166acd39914e72291cb494810319881268bd1141eff8aa5fd2faf975eed87efd0b80868cab314682401f1cccadfd87e8e791cdf20034166c6a41b83266604b3d48c44e1e381082ea48f39a85f9f0bc4b48507988df1a101632d1873389283998295470e9d308a4ed7af04a9e5f9112685d63dda6383b7ce23e35d7389ac6bf6e598dbe40f3a1929cb1966326216248e15ed7065e6581330a2878fbb4a83fbe48cfc2f7523e59a1626659235f595e105f6ef6244a5143825565724f594334771824e0befe9c3936a65bdb8134ce21e0d232a036037851faa5cf0def9d1c7d672f29be24148a739da7234f058b421c8dbe42487ce07196515711604eb6005b537b0899bce6544ac5aebdf7bef75fc183bdc7a5293efadb483a2d29ad542c37d057735b5661068bf1f4fc7f6f3841a27e5b947022d0d201820ac50a757d197f0282a92e5ebc43fc7784d2c6e37edc493c4cac4b33613c2c433161294aa05946aed5f9871555d10c772177a2b2ffeed8721087d505afbea3fc4add147578aefe2b13a83fabd7f662bec5b16c17d6a9aa9ffe23790f6143b8960832191e80d5bc3d8c97bab43c1ae4c2bff9f5e8bcddbe86fe4a11eeacf4580c71d0e5acb66ac0a650a09a04dcdb4c6ffcf2796f912af5d79a841491dedcd24a63378951a915f94371598e8de008cd9caed31a1bcaee5cb0", 0x1000, 0x6}, {&(0x7f0000002280)="ed8b7b49d4921d394be8b5fd7200946a82cf302c2dfb395d1a7045a38afa9c56c197731a1f22b983088dd494e2e171d78b65b4ce45750de4bb4088bb78d1839f19eadb6f22240d717c3adf5108663c537a1d96cf290f79c2e18c9c9c353a9d50735aacae8623e8edc353b77985c4b0af5560e5f6ab4db9e15817930bc8054e7b6c491c7017a0d76cd67e910e62b0e104263c6af9e1237635e713a57631ab0b0dcf28076a9e7d37f4e8e8c271984871c5a2dffccc9e1771920886dd114393572afaf591812872e41756b052bbfac2b5984687621a830c487c2803b47d413d18572fad32cab20a58ea6330274354857f6e6efcfa9baf730b5dda", 0xf9, 0x800}, {&(0x7f0000002380)="27cecec309aca480fae70ce58bb15b53e49ea92ef12d98b9deda47c44316bfe84180867130b0753e5103a22733d2fc1c73f44fed439a553b2d0b985b326b7c5b72a36c61f27414e5ffacd0024521473c3ae0fb65409a2fbf835b3179fc8dab8c7de5862a6bcc3eea265882898463fe30526ba5e6e56cab8af8e1b87fa0f9ea8289934ad8858a39cc72e96ccf91407069c98ca9584356c86aeeb3de34b2640feb46df76fba378b89041033274a88392a2efeae87bc773419434f6d3d574b5f60409466df7", 0xc4, 0x8}, {&(0x7f0000002480)="15a0ce4c72974381164a5627de85576bb966b1e3239bd893310a7390d1425f5538a0d61de0194aa15bb4f8e886aa37a4973e1677a015181c853049ea715cfd9b07d624fbd1ba0f8aab818faaef91e994013e97232c38915513ee987e3854e3b62210b313b261b1", 0x67, 0x6}, {&(0x7f0000002500)="e3e27ef97d3534a6c49e64e6870caec9baeba028ce1a50758e6d5abda3ad049fa6dfe0fc32acc3850f73189e8c82e5bcf65cc6e37f5ddcb8abe1bf87853d848db0531fe045fa714a718d5f69edf9801fdbc229", 0x53, 0xff}, {&(0x7f0000002580)="40cac288ebbbef6faa2b4bd9ebb1b6cabf91a7bcf6191a882d81a6bb70eff0be8405552c773dd0c41cde3e50750ed1698ac6f80eb9bb8384c915dcfab49426d9b637fb0cd6f9b5910c1868e2aee3588320d4b8ece7084cbd8ced4d1c7dfb0967f1873547740b604570ff244ab8c8d84f9ce0abf7437f165de1f5736db32f8e1738cfc882a090f232d1198c52e2816fc3d83ffdaa8cac4999841e8547bb9d9d90179b32b69621cf7a4060457c14bb6a9bca38713da86862ed677a30d0", 0xbc, 0x120000000000}], 0x2000440, &(0x7f0000002740)={[{@rodir}, {@uni_xlateno}, {@nonumtail}, {@numtail}, {@shortname_win95}, {@fat=@dmask={'dmask', 0x3d, 0x5}}, {@shortname_winnt}, {@fat=@dos1xfloppy}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}]})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
openat(r2, &(0x7f0000002a40)='./file0\x00', 0x200180, 0x8)
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
getsockname$unix(r2, &(0x7f0000002980)=@abs, &(0x7f0000002a00)=0x6e)
fspick(r1, &(0x7f0000002800)='./file2\x00', 0x1)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r3 = syz_open_dev$mouse(&(0x7f00000028c0), 0x88c, 0x2)
fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000002900), &(0x7f0000002940), 0x2, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000002880)='./file2\x00', 0x10000, 0x80)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000002840)='./file1\x00', 0x44000, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r4, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:23:20 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x300, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:23:20 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:23:20 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x500, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 2747.098890] loop7: detected capacity change from 0 to 40
16:23:20 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x112)

16:23:20 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xfcc)

16:23:20 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xf000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:23:20 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2747.164658] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2747.174914] loop3: detected capacity change from 0 to 40
16:23:20 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xfd4)

[ 2747.217950] loop7: detected capacity change from 0 to 40
16:23:20 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x500, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:23:20 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:23:20 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x300)

16:23:20 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x600, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:23:20 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2747.343321] syz-executor.3: attempt to access beyond end of device
[ 2747.343321] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2747.344187] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2747.353778] loop2: detected capacity change from 0 to 40
16:23:20 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x80000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2747.371854] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:23:20 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:23:20 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xf000)

[ 2747.444955] loop7: detected capacity change from 0 to 40
16:23:33 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x321)

16:23:33 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xf0ffff, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:23:33 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xfffff000)

16:23:33 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x700, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:23:33 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000180)="04000000646f7366d8a02b000801010004ff7f2000f801dd638369536a50622c53e6044fde129a6e83aeef6641632492b0bec4fd3012037ff075cc05c51ea06710c6c50100"/78, 0x4e}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x511800, 0x22)
r3 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x0)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000200)=@random={'security.', '-\x19-^-\x00'}, &(0x7f0000000240)='-@{\x00', 0x4, 0x1)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:23:33 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:23:33 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x600, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:23:33 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2760.318524] loop2: detected capacity change from 0 to 40
16:23:33 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x700, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2760.323079] loop3: detected capacity change from 0 to 40
[ 2760.329291] FAT-fs (loop3): bogus number of directory entries (32767)
[ 2760.329738] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2760.368030] loop7: detected capacity change from 0 to 40
[ 2760.388100] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:23:33 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x408)

16:23:33 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0xfffffffffffff000)

[ 2760.441433] syz-executor.7: attempt to access beyond end of device
[ 2760.441433] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
16:23:33 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2760.442415] Buffer I/O error on dev loop7, logical block 10, lost async page write
16:23:33 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:23:33 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x900, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:23:33 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x900, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:23:33 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x480)

[ 2760.599610] loop2: detected capacity change from 0 to 40
[ 2760.619857] loop7: detected capacity change from 0 to 40
[ 2760.660734] syz-executor.7: attempt to access beyond end of device
[ 2760.660734] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2760.661716] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2760.670561] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2760.855187] loop3: detected capacity change from 0 to 40
[ 2760.856562] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value
16:23:47 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:23:47 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:23:47 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x500)

[ 2773.814087] loop7: detected capacity change from 0 to 40
16:23:47 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0)
preadv2(r1, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/195, 0xc3}, {&(0x7f00000003c0)=""/193, 0xc1}, {&(0x7f00000004c0)=""/214, 0xd6}, {&(0x7f0000000280)=""/20, 0x14}, {&(0x7f00000005c0)=""/79, 0x4f}, {&(0x7f00000002c0)=""/32, 0x20}, {&(0x7f0000000640)=""/117, 0x75}], 0x7, 0x9, 0x8, 0x14)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000227bd7000fbdbdf25030000000800000006000000180006000900000014000180060004004e2300000800050003000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8880)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r3, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

[ 2773.820929] loop2: detected capacity change from 0 to 40
16:23:47 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xa00, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:23:47 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xd02, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:23:47 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x1000000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2773.853917] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:23:47 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x101042, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
renameat2(r0, &(0x7f0000000300)='./file0/file0\x00', r2, &(0x7f0000000340)='./file1\x00', 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r4, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
r5 = syz_open_dev$rtc(&(0x7f0000000180), 0x6, 0x40)
ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f00000001c0)=0x4d)
openat(r4, &(0x7f0000000040)='./file1\x00', 0x8100, 0x78)
sendfile(r3, r1, 0x0, 0x10001)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pwritev(r6, &(0x7f00000002c0)=[{&(0x7f0000000240)="1f61702d1cc52fae0fff29fdd7103ac3ec779508a67af329dae13133fd4eed8451b7d726d8da186cfc3c09a8bd7004ad1172892bdac8f30713bdcdf5d46016bfd517770615b6e711cdbebe606efde6d5f8a082ba13561bac609b25599b079f45597e7b91221a81e99c67167de30f2c9527e6474a8aad", 0x76}], 0x1, 0x2, 0x80000001)

[ 2773.872405] loop3: detected capacity change from 0 to 40
16:23:47 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xb00, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:23:47 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x555)

16:23:47 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2773.963531] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:23:47 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:23:47 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xf00, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2774.011764] loop2: detected capacity change from 0 to 40
[ 2774.055320] loop7: detected capacity change from 0 to 40
16:23:47 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x149a, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:23:47 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x600)

16:23:47 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x193)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syncfs(r1)

[ 2774.129007] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2774.131911] loop3: detected capacity change from 0 to 40
[ 2774.165457] syz-executor.3: attempt to access beyond end of device
[ 2774.165457] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2774.166430] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2787.779149] loop2: detected capacity change from 0 to 40
[ 2787.782209] loop7: detected capacity change from 0 to 40
16:24:00 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat(r1, &(0x7f0000000040)='./file1\x00', 0x28001, 0x2)

16:24:00 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:24:00 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x0)

16:24:00 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x2000000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:24:00 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:24:00 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x1800, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:24:00 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x700)

16:24:00 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x8b02, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2787.791622] loop3: detected capacity change from 0 to 40
[ 2787.809635] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:24:01 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x804)

16:24:01 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:24:01 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x2400, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 2787.869559] syz-executor.3: attempt to access beyond end of device
16:24:01 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000001e00000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2b003300d0000000ffffffffffff0802110000005050505050500000000425030000007606000000000000"], 0x48}}, 0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}]}, 0x2c}}, 0x4c000)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r4, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

[ 2787.869559] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2787.870595] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:24:01 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2787.923821] loop2: detected capacity change from 0 to 40
[ 2787.931001] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:24:01 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xc00)

16:24:01 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
setxattr$incfs_size(&(0x7f0000000040)='./file2\x00', &(0x7f00000000c0), &(0x7f0000000180)=0x9, 0x8, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[ 2787.973659] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting
[ 2787.983646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2787.984777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2787.990995] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting
[ 2788.000894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2788.001901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2788.016835] loop3: detected capacity change from 0 to 40
[ 2788.031163] loop7: detected capacity change from 0 to 40
[ 2788.106597] syz-executor.3: attempt to access beyond end of device
[ 2788.106597] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2788.107712] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2801.313811] loop2: detected capacity change from 0 to 40
16:24:14 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:24:14 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x3f00, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:24:14 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x4000000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:24:14 executing program 6:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
pread64(r0, &(0x7f0000000080)=""/224, 0xe0, 0x9)
r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1004)
readv(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = memfd_secret(0x0)
r5 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000540)={0x1, 0x1f, 0x7})
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f0000000000)={&(0x7f00000004c0)=""/66, 0x42})
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4e23, 0x9, 0x4e21, 0x2, 0x2, 0x0, 0x20, 0x2b, 0x0, r3}, {0x8001, 0x0, 0x23db, 0x9, 0x1, 0x3, 0xffff, 0x7}, {0x1, 0x7, 0x3f, 0xf48}, 0x1184, 0x6e6bbd, 0x1, 0x1, 0x2, 0x1}, {{@in=@loopback, 0x4d5, 0x2b5bfb30983e52a3}, 0x2, @in=@private=0xa010100, 0x0, 0x4, 0x2, 0x7f, 0x8, 0x100, 0xc3c7085}}, 0xe8)

16:24:14 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x1200)

16:24:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0xfe, 0x88, 0x5, 0x0, 0x8, 0x3, 0x3e, 0x3f, 0x3c8, 0x38, 0x68, 0x0, 0x5, 0x20, 0x1, 0xff0e, 0x4, 0x665c}, [{0x6, 0x3, 0x80, 0x7d74, 0x57, 0x40, 0x5, 0x6}, {0x60000000, 0x4, 0x3, 0x7, 0x3, 0x6, 0x1ff}], "ed9ca0b8564504706986038dbc6447f71a679d9c017fabf367ee69d82c48deea61d61fd502bf40325b25faac513329198c69b0d33df7d74a4b556a4be794bd8100f613a6e857c4c8951fa4d05d1b855c4e17f99977ad2ae66f4d4b7a26db1d72ec5dea4b1e4f51e0075895997861eff68b1daacdf65d7c268d33e747499d2355b1fd51ecbdf40181f2b3097edb5aef7e45cecf2365ac0720aedc0916347a8109d8cbd051ab70b2794b7cdc14feae4141f14023d5993976d093e7a6d130889d33886d0fb70d3ab3ffe4be4a157dc3cc2b71aa", ['\x00', '\x00', '\x00', '\x00']}, 0x54a)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:24:14 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:24:14 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xf000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2801.333189] loop3: detected capacity change from 0 to 40
[ 2801.344952] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2801.366361] loop7: detected capacity change from 0 to 40
[ 2801.388247] syz-executor.3: attempt to access beyond end of device
[ 2801.388247] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2801.389098] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2801.398710] syz-executor.3: attempt to access beyond end of device
[ 2801.398710] loop3: rw=2049, sector=44, nr_sectors = 4 limit=40
16:24:14 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:24:14 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x1201)

16:24:14 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x4000, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 2801.468344] loop2: detected capacity change from 0 to 40
16:24:14 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r0, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r1, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000100)={0x9c4, 0x101, 0x8001, 0x5, 0xc0, "a620666ff178a90c"})
perf_event_open(0x0, 0x0, 0x0, r2, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0)
dup3(r1, r2, 0x0)

16:24:14 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x30000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:24:14 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:24:14 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r4, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000400))
setresuid(0x0, r3, 0x0)
recvmmsg$unix(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/179, 0xb3}], 0x1, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}], 0x1, 0x1, &(0x7f00000003c0)={0x77359400})
mknod(&(0x7f0000000440)='./file0\x00', 0x1000, 0x7ff)
fchownat(r0, &(0x7f0000000040)='./file1/file0\x00', r3, 0xee00, 0x1000)
sendfile(r2, r1, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[ 2801.638432] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2801.669352] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:24:14 executing program 6:
r0 = clone3(&(0x7f0000000400)={0x80000200, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000180), {0xd}, &(0x7f00000001c0)=""/251, 0xfb, &(0x7f00000002c0)=""/60, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0, 0x0, 0x0], 0x4}, 0x58)
r2 = syz_open_procfs(r0, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
r4 = accept$inet(r2, &(0x7f0000000140), &(0x7f00000004c0)=0x10)
r5 = syz_open_dev$rtc(&(0x7f0000000500), 0x8000, 0x40000)
r6 = timerfd_create(0x1, 0xc0400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r7=>0xffffffffffffffff})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000005c0)={0xd6b, 0x0, &(0x7f0000000580)=[r4, r5, r1, r6, r1, r7]}, 0x6)
ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f00000008c0)=""/4096)
r8 = openat$cgroup_freezer_state(r2, &(0x7f0000000040), 0x2, 0x0)
readv(r8, &(0x7f0000000880)=[{&(0x7f0000000300)=""/169, 0xa9}], 0x1)

[ 2801.762741] loop3: detected capacity change from 0 to 40
16:24:15 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x1800)

[ 2801.808849] loop2: detected capacity change from 0 to 40
[ 2802.040800] syz-executor.3: attempt to access beyond end of device
[ 2802.040800] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2802.042630] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:24:28 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x4300, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:24:28 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0)
preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000080)=""/225, 0xe1}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x3, 0x100, 0x0)

16:24:28 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:24:28 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x6000000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:24:28 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:24:28 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x34000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:24:28 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x2000)

16:24:28 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x80000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101400, 0x188)

[ 2815.586448] loop2: detected capacity change from 0 to 40
[ 2815.595152] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2815.618835] loop3: detected capacity change from 0 to 264192
16:24:28 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x2103)

16:24:28 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x8d04, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:24:28 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2815.664508] loop7: detected capacity change from 0 to 40
[ 2815.695545] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:24:28 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x80000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:24:28 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x9a14, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:24:28 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x2400)

[ 2815.827277] loop2: detected capacity change from 0 to 40
[ 2815.837616] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:24:42 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x2e00)

16:24:42 executing program 7:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x140)

16:24:42 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='map_files\x00')
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x6)
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x124)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40c000, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000980)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r4=>0x0}})
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESDEC=r4, @ANYRESOCT], 0x48)
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000003c0)={0x7, 0x0, {0x6, @usage=0x3ff, 0x0, 0xfffffffffffffffd, 0x6, 0xfffffffffffffeff, 0x4, 0x8, 0x481, @struct={0x3b1, 0x2}, 0x1, 0x40, [0x5, 0x7, 0x7ff, 0x10000000000000, 0x8001, 0x14]}, {0x4, @usage, 0x0, 0x6, 0x3, 0x3, 0x7, 0x356, 0x1, @usage=0x3ff, 0x7, 0x0, [0xffff, 0x7, 0x1, 0x5, 0x0, 0x8]}, {0x520, @struct={0x7}, r4, 0x2, 0x1, 0x1, 0x5, 0x7fffffff, 0x35, @usage=0x4, 0x8001, 0x7, [0xffffffffffffffff, 0xc992, 0x3, 0x1000, 0x401, 0x3]}, {0x1f, 0x4, 0x1}})
sendfile(r1, r0, &(0x7f00000000c0)=0x800, 0xc1ed)

16:24:42 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x400300, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:24:42 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xf000000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:24:42 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)='system_u:object_r:hald_sonypic_exec_t:s0\x00', 0x29, 0x3)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x151902, 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:24:42 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:24:42 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xedc0, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 2829.504531] loop2: detected capacity change from 0 to 40
[ 2829.517745] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2829.535930] loop3: detected capacity change from 0 to 40
16:24:42 executing program 2:
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x140)

16:24:42 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x304a)

16:24:42 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x80000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:24:42 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)
r1 = clone3(&(0x7f0000000240)={0x241010000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000180)=""/124, 0x7c, &(0x7f00000008c0)=""/4096, &(0x7f0000000200)=[0x0], 0x1, {r0}}, 0x58)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x9, 0x40, 0x94, 0x81, 0x0, 0x1000, 0x5031, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x80000000, 0x1ff}, 0x4013, 0x7f, 0x5, 0x6, 0x40004, 0x6, 0x200, 0x0, 0x3f, 0x0, 0x7}, r1, 0xc, 0xffffffffffffffff, 0xb)

[ 2829.653476] syz-executor.3: attempt to access beyond end of device
[ 2829.653476] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2829.655408] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:24:42 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x3f00)

16:24:42 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xf0ffff, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:24:42 executing program 2:
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x140)

16:24:42 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

[ 2829.763872] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:24:43 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x40)

[ 2830.004150] loop3: detected capacity change from 0 to 40
[ 2830.035971] syz-executor.3: attempt to access beyond end of device
[ 2830.035971] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2830.036980] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:24:55 executing program 7:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x140)

16:24:55 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x4a30)

16:24:55 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x1e020000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:24:55 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x400000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:24:55 executing program 2:
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x140)

16:24:55 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x1000000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:24:55 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='cpuset\x00')
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=<r1=>0x0)
pidfd_open(r1, 0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000700)={0x1, r1})
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xffff, @any, 0xfff}, 0xe)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'})
recvmmsg$unix(r2, &(0x7f0000002fc0)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f00000028c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/236, 0xec}, {&(0x7f0000000540)=""/219, 0xdb}, {&(0x7f0000000640)=""/141, 0x8d}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000700)}, {&(0x7f0000000740)=""/204, 0xcc}], 0x8, &(0x7f0000002940)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000002a40), 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002ac0)=""/210, 0xd2}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000002bc0)=""/209, 0xd1}], 0x3, &(0x7f0000002d00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002d80)=""/28, 0x1c}, {&(0x7f0000002dc0)}, {&(0x7f0000002e00)=""/7, 0x7}, {&(0x7f0000002e40)=""/85, 0x55}], 0x4, &(0x7f0000003300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="008d933f5904b8dc3cb912f1c29f590000000200295de8d66f56b51d8326df13028563075e51a4fba34c90169eac8376dafd7e0bd536666474fba731521e3ed68eb6302e7ceac4ffa932048f989b8f07a51f8275cd033574da91554131d0e0d222498de13ab76684bb783973e33c577bfc8e3805c81ef54c9aa87ed6df4cc290d9625b976a65a90c76c82d4370c545e485b31f6520a4cf6c46a1114798529a46f57997", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xb8}}], 0x3, 0x10020, &(0x7f0000003080)={0x0, 0x3938700})
syz_io_uring_setup(0x5870, &(0x7f00000030c0)={0x0, 0x8134, 0x20, 0x1, 0x171, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000003140), &(0x7f0000003180))
r4 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000000))
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
fadvise64(r0, 0x6, 0x200, 0x5)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000031c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="000027bd70000000000003000000080034000000000008002b00000000000800340000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000040)
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40845}, 0x40)

16:24:55 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
open$dir(&(0x7f0000000040)='./file1\x00', 0x8000, 0x20)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x343, 0xb4)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x111000, 0x0)
openat(r2, &(0x7f0000000180)='./file1\x00', 0x800, 0x96)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {0x0, <r10=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x5, "af2f1a9317bc6f"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000300)={r6, 0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000046080)={0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046280)={0xfff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r11}], 0x0, "631a5f5ba60f33"})
sendfile(r3, r1, 0x0, 0x10001)
r12 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$TIOCGSID(r12, 0x5429, &(0x7f0000000200))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[ 2842.704884] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:24:55 executing program 2:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2842.747154] loop3: detected capacity change from 0 to 40
16:24:55 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xe0ffff, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 2842.792028] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2842.802096] loop2: detected capacity change from 0 to 40
16:24:56 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x1000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 2842.870426] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:24:56 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x5505)

[ 2842.933765] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:24:56 executing program 2:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:24:56 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x2000000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2843.042023] loop2: detected capacity change from 0 to 40
16:24:56 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:24:56 executing program 2:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2843.096486] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2843.143518] loop2: detected capacity change from 0 to 40
16:25:10 executing program 7:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x140)

16:25:10 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x8004)

16:25:10 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x67000000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:25:10 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x3000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:25:10 executing program 6:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=<r0=>0x0)
r1 = pidfd_open(r0, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000040)='autogroup\x00')
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000000))
readv(r2, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

16:25:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f00000000c0)='./file1/file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:25:10 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:25:10 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x3000000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2856.850366] loop2: detected capacity change from 0 to 40
[ 2856.853612] loop3: detected capacity change from 0 to 40
[ 2856.894197] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:25:10 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xc000)

16:25:10 executing program 6:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=<r0=>0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)=ANY=[@ANYBLOB="0100001800008b03000000000000fd2c03bbf3ba940755775fb31147bb963e97d5503d93391b847e2438c3d933c0830b6541a52a14e0c6ec8d2c059814fb59743c945ab227bd7c0302d0594d7a0a9e78d49140bd4123b9e7efceb2f5fab529aa9c978dd88fd07afb16c7e8a26f76cce086e881ff885ff7e581f5062593ba7f5b8e46", @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="e000deff2d2f66696c653000"])
ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000140))
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000200)={0xa000, 0x0, 0x2, 0x800, 0x6, 0x1})
r2 = syz_open_procfs(r0, &(0x7f0000000040)='uid_map\x00')
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000800))
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
pwritev(r3, &(0x7f0000000780)=[{&(0x7f00000003c0)="32afac0d34d6a8d9e702f16f01f39a575b54bf987c41a36840367248d9d0edf79fc8cab97faeed618803b73f30127b7ba045dfb9e5687e1b7c3ed0d75b8bc67635dbcb54abf0421cbe7dc6d8b9ffbf448bae4cb29797b3ccee64ebdc2ff06d98f1db61b6fcdf32f92887324a1009f6cf957780ff58291b41cc01b0b9a43b", 0x7e}, {&(0x7f0000000440)="981c3fa11833197f474f3f812054ea645450fedc343a4d89bbb9ef142d93834fc45723954429ceea13805824dc67dfe312187731278490d6d58263a5f88b029e9791fa392c3ea5ccf69c47ae73c3e4da3b2950", 0x53}, {&(0x7f00000004c0)="ab1f236cb02a4a7c4c207fed8fb1ab3d61661d3dd969785ebed04f03493953a066c96cb774b91ba1ff07c8a2fae1efd8c9bcb26effd59e5816d8893d888b147d525352a9158ef7a52633034f95eb4e701bda1d54b9d4fb9086fe719ad265f4929e55118c6f0b549a7aa7a1bdbcaf9a8271081faf968287b2568cc89b32c09c0241ea48239734fec44ba837412edc96228a390553726b415edd60f61f598c3e3b190897bec8cfb2261e9c0221fe752080f5d6ba81d7c30dc8d400248c1b1a0898e2837c4f14c3d9c3a7ad1748d3", 0xcd}, {&(0x7f00000005c0)="f55ba4bbde9373319c17ffe40ef8d7a19d8c9514065e5ae46b23725cb2b2c989b647e254b7afb85c88c4d1bbcbf2101e44aa682bccd55ea6a6ee0d69b5d1a48feea8f03ccb4fd9a10b4355dfcfde9a5cda7a3a916a8bdc73a9c0ae34a031c01ee6401c87fae67937f3c2249274f31cba97f4e46e43e70af06016a08ce9cc99238d14a606a3bca9c6984e5f4c5201259385bd5be381ca2d1ff8c27cf2289c196fe30ff4f64ff812b95ee52295fed2e2fdf5305546a5de1c05e40639d6cf086876e943dbb8258bcf56209f67d0bd6f7fff63c0ab4d2c435938fea62aaf9f08799fc31cbfd6efda4b2dc6637bbb0766f43cfd33a692dd638a", 0xf7}, {&(0x7f00000006c0)="cc78380b5c2557604a540814821e4e56f9c9e06b1661e6594781eace010b237779b5e1ed2bd1ca25bfe0250f542a7ae3a372b4dccd0b56b8f89bf9f34b0eaf21e1115de426299d8bf9a8aded2a490afb3f0c45e90bf118aa61e051f8e35cf1cf9b787513076947edfb92b647f2bb57bbd92566c8b651f4bcc37f2df2717cd58a531ecba032c2868d902b1db7abeecb9b3ff08b5c9a4443b0815630ed39f5e6173beefdfd3e86f9a2fa344cfa28ecf0", 0xaf}], 0x5, 0x36474e1e, 0x1000)
r4 = accept4$inet(r2, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x80800)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r5, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x200, 0xba3}, {0x549, 0x8000}]})
readv(r4, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

16:25:10 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x4000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:25:10 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2857.083606] loop2: detected capacity change from 0 to 40
[ 2857.093783] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:25:10 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x9effffff, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:25:10 executing program 6:
modify_ldt$write(0x1, &(0x7f00000001c0)={0x400, 0x20000800, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{0x20, 0x7f}, {0x73, 0x9}, 0x5f0, 0x9, 0x1})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x1000}}, './file0\x00'})
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000240)=""/32, 0x20}, {&(0x7f0000000280)=""/55, 0x37}, {&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/54, 0x36}], 0x6)

16:25:10 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x4000000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:25:10 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xf000)

16:25:23 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:25:23 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000040)='./file1\x00', 0x80, 0x80)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r4, r1, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:25:23 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x5000000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:25:23 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xf0ffffff, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:25:23 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x80000)

16:25:23 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

16:25:23 executing program 7:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2870.577451] loop7: detected capacity change from 0 to 40
16:25:23 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x5000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 2870.642447] loop2: detected capacity change from 0 to 40
[ 2870.647184] loop3: detected capacity change from 0 to 40
[ 2870.659695] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:25:23 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
poll(&(0x7f0000000080)=[{r1, 0x1020}], 0x1, 0xc2f9)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/192, 0xc0}], 0x1)

[ 2870.688723] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:25:23 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:25:23 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x200000)

16:25:23 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x6000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:25:24 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x6000000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:25:24 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2870.887669] syz-executor.3: attempt to access beyond end of device
[ 2870.887669] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2870.889319] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:25:24 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xfffff000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:25:24 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x80ffff)

[ 2870.987161] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:25:24 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x7000000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2871.039439] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2884.209639] loop3: detected capacity change from 0 to 40
16:25:37 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:25:37 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x7000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:25:37 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="0301001dc40000002e2f66696c653000"])
recvmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000100), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f00000001c0)=""/183, 0xb7}], 0x10de, &(0x7f00000003c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x42)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r1, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1)
r2 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0xfffffc00, 0x2, 0x80, 0xff, 0xdeb2e701})

16:25:37 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xffffff7f, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:25:37 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xc00000)

16:25:37 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x9000000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:25:37 executing program 7:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:25:37 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r0}, './file1\x00'})
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r4, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0)
lstat(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
sendmsg$netlink(r3, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000180)={0x220, 0x1f, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x4, 0x53}, @nested={0x209, 0x3c4d, 0x0, 0x1, [@generic="5a5cb03854d549f1c062bd8d7e4f93acf04fb8ae49f4be58ec20542845b65c0ea4cf5eec16fe33b670d6195e6e0ec356b8addd14bef20b0c2ecb73ccbd76912a5150ffdc175286f82d5a32b7b63d3ec1103493ba94a8fa8920119d749fa76ad633a00a05bed83904faab7d44216f5c6e617b96082f2e09cf6a805ae31994e0b2cfd25d9d4eb2d33787eda1231fedabaf87f512344df7fca95cccf96552ef76aa8b4f17db82103806b3c7c11d5fa3fbe0def5b9a6", @generic="b3007b8fdb9b2a3ff615f9a5f977f247bda70dde83a4017e6b8bb828c32d68944fbf40ab3b1bf378a71069e85ac94d53971532a1987384e4a905ef2ce91acc9e97d85d2e95e0485dd9ed4f424b125f4799237efc965a3a49f35f830b1c49f28f197b7f453fc1882f90931ba3e237285618220003ba913753e42575b551141d77bae5af67c3537b90161a28b56c61086f6c7fbda21049b43f79c5d5374d14adc61ae56b2397d151dfd82c6b0bcca3d22d6e60927c66d8d415baca06048e574d0eac16cc38d0ea4bfcdede1831466cdbe088", @typed={0x4, 0x50}, @typed={0x8, 0x7d, 0x0, 0x0, @fd=r0}, @typed={0x74, 0x53, 0x0, 0x0, @binary="7bb89925892005b3022f1314ad80a88ca253f81702273df49fe592e96dadd4fe4ddf3ce3115e00f3501a56be37a6de2d49032ab253e3fe2a5ec146a3018c571f107a9437661278b418671e422643cc8ae0347d136fd3c3539a529198d679d700207148305642ef55185f826e9e6d5dee"}]}]}, 0x220}, {&(0x7f00000003c0)={0x94, 0x34, 0x20, 0x70bd27, 0x25dfdbfe, "", [@generic="b1f16001c06a1d58aa047401f9269e67c68e2c81b9689ad5760e8c235e9f877ca3f9a2e765fdcf27e41955c0622b198eb5bbc11d34e3b98a29f21b8d8a047f822f2aa7dfaea2b48cbc2cef3978e70e54f3b98015dcf7313af63d0f410ceb9922903ec096912cc6d6496332b4cca9034655c9cf64723693025f242f54f29e20349e4ad4"]}, 0x94}, {&(0x7f00000000c0)={0x18, 0x20, 0x4, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x8, 0x26, 0x0, 0x0, @fd=r4}]}, 0x18}, {&(0x7f0000000540)={0x12f8, 0x35, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@generic="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", @nested={0x2e8, 0x23, 0x0, 0x1, [@typed={0x10, 0x54, 0x0, 0x0, @binary="1ccad95041348c0a476e70d5"}, @generic="67615a03851c6cbe52b2906666d044b7df857242014b95cb010ce59e1b05801c07df4c1b724c31c3f167b6e2e427bbae5858f76f494edcaa2bb5895f73e206a88a1855a240fa74eddba4de5f9a7fe5fcf27738961016896cd01770de84079811690977976af414163cb87961b28239caf59f27a222b125ceede40f7b6f0b0ba1113fc25968", @typed={0x8, 0xd, 0x0, 0x0, @uid=r5}, @generic="1ade035f724b108a359b700a", @generic="a0d962eb1b56056e0cfcd559ce78b9d6a40c12ae3cdded9afdb120ddee64b2534179afccbe93c5065ff0a6ca56e3964d97aa772f81bd284dbbd47238fcc3d9da2073a4c4648ee5c21fa826d54ee10c6911347303a6aab0ce224ef33da46c8a997320bf7dd54aa04d1eb6a335e442b173dca781847921507445cef492cfd39f5a807fc5ae015dadc564b21644f5349164ec863e12cf0170160c605300ab85b80c121f6af711cf97ed0f2fb4f675beb33868630d92e4beb473dbd2bd128742da8ca694c6999a0310fbef59706875c385219498", @generic="998da7fdf40042b333c90ac2843e23c74e1c04afa540ab6ab904d7f29b0ac174840d481dcdd733d9d9556ad12c525c9adb67f334a3", @generic="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", @generic="a74b49b7da72693dbc651272d2e849b9e7ed75596631a3da66b44ba26f52743e52974f3d489920eec7efd795c1dc6f14561f0dc121b67d81e4"]}]}, 0x12f8}, {&(0x7f0000001840)={0x2d0, 0x11, 0x200, 0x70bd29, 0x25dfdbfe, "", [@nested={0x1fb, 0x3, 0x0, 0x1, [@generic="d1eaabd8b513db5705ae05cfef8c99cd6d49", @generic="81c7a1e6948d80c007a8860f0664fbf802124791bb1357b3961ca942ff31ae3b73a072bca16e3a61e40cf8c213de594b1591733060eb23812b487a1bfabaf2d2adb1d24a5a7901c18a30940e68cb4784b4036d92bec7607457d5b32b25ac82355e651296619092f18661169ff142153749db4ab0af49a45c57c03e98d20a008cb31a08db04818101646b7bbced21f6f11bb8c1e925d55e6e3902d7c0760d622c58b12faa", @typed={0xc, 0x9, 0x0, 0x0, @u64=0x4e2d}, @generic="b6150bdc45671d1b7e0f23e4b4bcc13ff66800f43e18c30a8e157770cfc42f722ea8f9e8fdbb3bc5e09ee97093fe84210a745d0c8a0a44906099cf594a8107dc664e2a", @typed={0x4, 0x40}, @typed={0x31, 0x32, 0x0, 0x0, @binary="26513e9c61597094eef09edff5bd530d508276d0e3397544f1b2d14ce588dd37d80a099e17d158b4b68c26bfd7"}, @generic="eeae94ef1dafaf123370097bc6db0eaa4e8c5a21ce81e5a6c9feb9b8b90bef21b9b7f84d5939fa17c08f019b429fc426d5ee6469070eb19c5f10b46f01281aaa6bee147c7abbc30f001e8a2e1b5283d2bda4e1678edad72eca1a678520077bbedff9558349ba825b50ddde3d46134a3c0918e87a027dae2e179e46c7f9a07fd30767da69fa3a6bc729c23b8c54be78a4841f53e4516b55d8cc52e23901ecd8411acbd0467422b356f84fa236d8ebd65616cc5ffe499628b0d617"]}, @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@local}, @generic="7b790582d1e6377fa693c00933dca4fab74607b4f2ea553b23b2c8cd08cb3a8360edb26bc317961ce87e068137b42e4aaaf5b577cde5330cbb3a2c8ec754895d7116001f5216b7bf9643a0b33110244cea150f49845c341512a0b921b24fd5634eef5367f26ceecbf69b86fbf1e6a83a62d8052f3979fa7b3f11888392e0b87c4414645dc1c22e4d051d8802e0145faf61ec9d0428956afc6c95f62b8fbf5bd332a06b612fb4e95b51e4ece2ce", @typed={0xc, 0x48, 0x0, 0x0, @u64=0xfc00000000000000}]}, 0x2d0}], 0x5, 0x0, 0x0, 0x4004}, 0x20000040)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[ 2884.243733] loop7: detected capacity change from 0 to 40
[ 2884.276316] syz-executor.3: attempt to access beyond end of device
[ 2884.276316] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2884.277182] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2884.281780] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:25:37 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:25:37 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xf0ffff)

16:25:37 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/174, 0xae}], 0x1)

16:25:37 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x8000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:25:37 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x10000}}, './file2\x00'})

[ 2884.375308] FAT-fs (loop2): bogus number of reserved sectors
[ 2884.376126] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2884.461147] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:25:37 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xd020000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2884.469849] loop3: detected capacity change from 0 to 40
[ 2884.525833] syz-executor.3: attempt to access beyond end of device
[ 2884.525833] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2884.526692] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:25:51 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)
r1 = eventfd(0xfffffff8)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000003c0)={0x0, 0x3a7e, 0x101, 0x1})
dup3(r0, r1, 0x0)

16:25:51 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x1000000)

16:25:51 executing program 7:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:25:51 executing program 3:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000700), 0x20100, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3}, './file1\x00'})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x2, 0x6, &(0x7f0000000540)=[{&(0x7f0000000180)="1be94c167c6e449a95f1c5941e0490cd634ed2a2b02e056f2db036d90c225ccb8dec45f8bdf93c7608a8f7b5b8d751023e919498d46b58369bf334618edd586290dc5742a8fc0fa1969a4481079a66c45f37768b877668ba184b24b4f1967774c09f57da1fd28ddd375ea19d43810ed828bfb34400efd788ee2f86a1fee9507323e4843632c2f94cde72dd60388e927da6f06d5ab078f826f71650a23593afe349ca4bf5eb5864af89eee3731273ee7e1005", 0xb2, 0x76}, {&(0x7f0000000240)="e98d6e2d2cfc", 0x6, 0xfffffffffffffffb}, {&(0x7f0000000280)="494713168ed3d9dff27ba2380aa7e19f4975411f9515b1e122b7988c48a50040e37aff1d03cb23952d4b25f5313131322f63693327509ddd692ef8eb3ff4924eab9a195e132d5806da62f09a9bc129ec00479d6170e6cacf4f2714bd7cff4ce350638cd15cc592a478c39b0f8a58", 0x6e, 0x6}, {&(0x7f0000000300)="c9bc720c5ed27cc0be6c09c0214179833702b83d57d1482acdf6d81541d84210ce426859eebc923b68530f536fd77dbf9f42af4300458c8b96a47453461fa3c4b8c3077269a8f977bcbcbbfaeac1cd8cb1a4fd80559a3752150f049e082100ecbfa3a1f3db8369f9fc555b0d29f15b5646feb9ac183a48534ad09e54e47ffa0d64d5274b673c89b8635d82d380187110010de4780bb6470101b4b1bb4e659b196ee8388f5467403d333c4c9bb50b384a24d50cb5555804ed7759ea9c355eec00d231c2f1df87a5148264877f5dc1e2ef", 0xd0, 0x7}, {&(0x7f0000000400)="f233831652c10a6209d7cd50d654c9b614ac30c6ff55c24b8d310206a8fc75633a742844871d8979b7abde938d64dbe4c5ba0af1faba5ab162b4936c98f036eca5142f9a5cf57333453553eb0553d4408cc562e79eaa5fdcd2de31913bfc9feb98aa9503462d7cf9d98a2d2ff43cbe3fc9019e4c6b09fff6f4c7f7559b0b3e1352ad58b0ef5c789f25ef418155c3fe9747f4abaa491f0fbc67b01eda177e62f9d2b415a17fc11a87d2cb069e1086380cd531822e3ff2280108e58d94da90682b6040528c09757e02c28424f269af3e79414ee0268f1b", 0xd6, 0x100000001}, {&(0x7f0000000500)="e038642a", 0x4, 0x8001}], 0x0, &(0x7f0000000600)={[{'+{\'.^-[]+/]}][(^^'}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}, {':]'}, {}, {'/]!-[\''}], [{@fowner_gt={'fowner>', 0xee01}}, {@measure}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@smackfsdef={'smackfsdef', 0x3d, '[@+}&'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x63, 0x30, 0x34, 0x33, 0x31, 0x64, 0x58], 0x2d, [0x33, 0x65, 0x61, 0x32], 0x2d, [0x36, 0x64, 0x30, 0x66], 0x2d, [0x36, 0x33, 0x38, 0x65], 0x2d, [0x30, 0x31, 0x0, 0x6a, 0x38, 0x62, 0x63, 0x37]}}}, {@dont_hash}, {@subj_role={'subj_role', 0x3d, '(*^\x1d-@{\'$,$,'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@context={'context', 0x3d, 'system_u'}}]})
ioctl$FICLONE(r4, 0x40049409, r1)

[ 2898.360513] loop7: detected capacity change from 0 to 40
16:25:51 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x9000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:25:51 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xf000000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:25:51 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xffffff9e, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:25:51 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2898.396541] FAT-fs (loop2): bogus number of reserved sectors
[ 2898.397310] FAT-fs (loop2): Can't find a valid FAT filesystem
16:25:51 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x2000000)

[ 2898.475132] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:25:51 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:25:51 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x8b020000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2898.537811] loop3: detected capacity change from 0 to 264192
16:25:51 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xa000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:25:51 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1af02674", @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf250e00000020000280080002000700000014000400c783062a5319284bd9e61dcbb892aba50c000280080002003b0400000c0001800800030001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r1, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

[ 2898.552928] nfs4: Unknown parameter '+{'.^-[]+/]}][(^^'
16:25:51 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x3000000)

[ 2898.650074] FAT-fs (loop2): bogus number of reserved sectors
[ 2898.650718] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2898.686119] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:25:51 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:25:51 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x4000000)

[ 2898.749120] FAT-fs (loop2): bogus number of reserved sectors
[ 2898.749730] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2913.649270] loop3: detected capacity change from 0 to 40
16:26:06 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:26:06 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x14)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:26:06 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:26:06 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xb000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:26:06 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x9effffff, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:26:06 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x5000000)

16:26:06 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xfffffff0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2913.664548] FAT-fs (loop2): bogus number of reserved sectors
[ 2913.665018] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2913.679017] syz-executor.3: attempt to access beyond end of device
[ 2913.679017] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2913.679926] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:26:06 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2913.719796] loop7: detected capacity change from 0 to 40
16:26:06 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x6000000)

16:26:06 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)

[ 2913.744188] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2913.762004] FAT-fs (loop2): bogus number of reserved sectors
[ 2913.762453] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2913.795184] loop3: detected capacity change from 0 to 40
16:26:07 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x10000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:26:07 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xf0ffffff, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:26:07 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:26:07 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x7000000)

[ 2913.892379] syz-executor.3: attempt to access beyond end of device
[ 2913.892379] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2913.893431] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2913.898521] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2913.907780] loop2: detected capacity change from 0 to 40
[ 2913.933395] FAT-fs (loop2): bogus number of reserved sectors
[ 2913.933806] FAT-fs (loop2): Can't find a valid FAT filesystem
16:26:07 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
recvmmsg$unix(r1, &(0x7f0000004340)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000400)=""/10, 0xa}, {&(0x7f0000000440)=""/243, 0xf3}, {&(0x7f0000000540)=""/75, 0x4b}, {&(0x7f00000005c0)=""/254, 0xfe}, {&(0x7f00000006c0)=""/35, 0x23}, {&(0x7f0000000700)=""/4, 0x4}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x7, &(0x7f00000017c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001880)=""/237, 0xed}, {&(0x7f0000001980)=""/156, 0x9c}, {&(0x7f0000001a40)=""/6, 0x6}, {&(0x7f0000001a80)=""/54, 0x36}, {&(0x7f0000001ac0)=""/203, 0xcb}, {&(0x7f0000001bc0)=""/240, 0xf0}, {&(0x7f0000001cc0)=""/179, 0xb3}], 0x7, &(0x7f0000001e00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001e40)=@abs, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/27, 0x1b}], 0x2, &(0x7f0000002f40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000002fc0)=@abs, 0x6e, &(0x7f0000004200)=[{&(0x7f0000003040)=""/203, 0xcb}, {&(0x7f0000003140)=""/124, 0x7c}, {&(0x7f00000031c0)=""/18, 0x12}, {&(0x7f0000003200)=""/4096, 0x1000}], 0x4, &(0x7f0000004240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r2=>0x0}}}], 0xd8}}], 0x5, 0x40000000, &(0x7f0000004480)={0x0, 0x989680})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=<r3=>0x0)
pidfd_open(r3, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=<r4=>0x0)
pidfd_open(r4, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000044c0)=<r5=>0x0)
clone3(&(0x7f0000004540)={0x80340000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000180), {0x3d}, &(0x7f00000001c0)=""/47, 0x2f, &(0x7f0000000200)=""/222, &(0x7f0000004500)=[r2, 0x0, 0x0, 0x0, r3, r4, r5], 0x7, {r0}}, 0x58)

16:26:07 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x18000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 2914.064656] loop3: detected capacity change from 0 to 40
[ 2914.115541] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2914.158032] syz-executor.3: attempt to access beyond end of device
[ 2914.158032] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2914.159818] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:26:22 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:26:22 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0xaa441, 0x10a)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r3, r2, 0x0, 0x10001)
sendfile(r1, r1, &(0x7f00000000c0), 0xffff)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:26:22 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:26:22 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x8040000)

16:26:22 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xffffffff, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:26:22 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xfffff000, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:26:22 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x24000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:26:22 executing program 6:
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="004a22a3ee4cfd25860e042dbd70255d00800008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000080310000000800a50000000000271cf0d8c5458ee57fce5fbfbd78ea8fdaa63eb8e353ae1d1c1df35df329609696cfc39e093bdaafc3d4724305dc1a6e65fe0efeb689efb231c62a6269ba02ea2b1307fa7e5a67db67433da3da3db575ea4f5cc9ac4ae7f63e17f14080d9b4db81d3778bf34cf5717ea9f531bebf9499db4bb41568686fafe6a906bb2ca5b8af40664d34723f2774b5cc1def036e2b30086f9d24e7f0734b3f35fe8b9c935b185124c36de8de820f14c1026a678792e3f0de32de693bc8aa4e0b1b41"], 0x30}, 0x1, 0x0, 0x0, 0x20040012}, 0x4)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={<r2=>0x0})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$netlink(r3, 0x10e, 0x9, 0x0, &(0x7f0000000000))
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x2e28a0, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRESHEX=r3])
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x2, r0, 0x1, 0x80000})

[ 2929.097808] loop7: detected capacity change from 0 to 40
[ 2929.114801] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2929.154139] loop3: detected capacity change from 0 to 40
[ 2929.156197] loop2: detected capacity change from 0 to 40
[ 2929.171954] FAT-fs (loop2): bogus number of reserved sectors
[ 2929.172768] FAT-fs (loop2): Can't find a valid FAT filesystem
16:26:22 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xc000000)

16:26:22 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:26:22 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x3f000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 2929.355377] loop2: detected capacity change from 0 to 40
[ 2929.373567] syz-executor.3: attempt to access beyond end of device
[ 2929.373567] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2929.375115] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2929.389452] FAT-fs (loop2): bogus number of reserved sectors
[ 2929.390396] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2929.415628] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:26:22 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xffffff7f, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2929.435456] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:26:22 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x40000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:26:22 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x10000000)

16:26:22 executing program 6:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=<r0=>0x0)
pidfd_open(r0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040), 0x6e, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/239, 0xef}, {&(0x7f00000001c0)=""/190, 0xbe}, {&(0x7f0000000280)=""/106, 0x6a}, {&(0x7f00000003c0)=""/61, 0x3d}, {&(0x7f0000000400)=""/80, 0x50}, {&(0x7f0000000480)=""/97, 0x61}, {&(0x7f0000000500)=""/68, 0x44}, {&(0x7f0000000580)=""/169, 0xa9}, {&(0x7f0000000640)=""/223, 0xdf}], 0x9, &(0x7f00000008c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r1=>0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x40000120)
r2 = inotify_init1(0x80000)
pidfd_getfd(r1, r2, 0x0)
r3 = syz_open_procfs(r0, &(0x7f0000000000)='stat\x00')
readv(r3, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

16:26:22 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:26:22 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xffffff9e, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:26:22 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000180))
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[ 2929.687736] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2929.709664] loop2: detected capacity change from 0 to 40
[ 2929.716698] loop3: detected capacity change from 0 to 40
[ 2929.726433] FAT-fs (loop2): bogus number of reserved sectors
[ 2929.726916] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2929.813129] syz-executor.3: attempt to access beyond end of device
[ 2929.813129] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2929.814128] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:26:36 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x43000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:26:36 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='fd\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x30b880, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f00000008c0)={{}, "85e4f26d7f677127161b089634f743935fb05f8055ceef1493701796f3f4b65aca767b6089fbf5f30caca13fcd4a7f623463ebcb8a6b179ec6b9c3695d096e770c9dfd16edff4b30336932ef4b088c59a84dad6cf04f18987e8e5ba5fe4395119c2dcd74d105c0c480afc9031ead3c339c7ee71ff5ccd7c7588bce09b52589824eafea9f0c87b7af34882ce161028ef7a6aed5ace87f7689e65d2c037ee338517d7c7d62f416acaffcae6ee36f5e992d075b928c79cbba47e72e3fe3c9bc256b0d4ead5dcc8a4c81555d2eff704901b8cbaddd925877f3b23068ba262a7b57a3fb2807128684a1468c445156708d2fa4cd29d92d69437b57587be0985f21b166feeb8930903bcba79f2594d48c88a30f33d954b3b689bdffb68646501fcee884d4469e2a07dbd2c482a4dc5afc0b2c05254edc012488976aed349b4187e68e7c6cea21387f8139850de596a52b4dc13c9b865a713ef94799b44d917bbb49bbeff2c5f0dd3c5e992f6668498b3aca36f645b232d37329ff32a86b63ce955c05af0cf824325e2588e8ad19e201e8f94c9b03159eac64f942e3d37c9b8385d60ad74b50c49975f0080ea97cdb576476f124ec9f17914871191632e612d34187be158f364766384be1bda050ec10c29d4f3ded5fce0bfd26c6bf30c29937204295540e445eb57ffabf4f06f1dc31912eea614969f2edf2844f5018d97d086cd906246c57fb1da09e18d2ab2bc35b1d8612786ca03e12d79790696c313157b35535a6e6f250476a36db269d78036fff40502cd7b3bba1ea1cb608ea94544d6f3e819c18b5bbaf5af75443622ad58dbf57b4a264b91eacc06d4306b55421bd89e13c46208df4dad9b0215eb4bde4c673fedd1ba0514646ab2c732d9f7efe3d80f025016dc112bbce681c0cde49aa311814be3913f7c3af9d75c44ea271833f0b57705838012b8bacb029764c056ce78b122fb224f9bdb4e88e89869d0522da9bfa888d51b914e996083699c6fbea31817dba5b9477563d3210123a496f59a1354c209eecd8ffdb92b5d6fb485ca3fa3aae3a3c02e4f14634f683a5ad33f45a15c97f67dec7cbe6039e344cff86bdec6706070d80ffe375e95ae6ff01ea0f8d1742f220c71afd0a9d2418e6c79b30a2a1b50e0053c384a9bf5de90b8f589e2deb56e44c54dfc641258b63424d3ceac4db9ee24ec6f1e325f3d64eadbe43c335ae70beb38eedeaafe78b15e22b4929ad462df16f207541aa6396afd7e4fb0d04945c82b2613e7c4e217ef0f5d17bd9fb48adf64a5049c2374466d30a40798b3218a6902b23342f4331d7fad1343816af8dcc930cdf93726a85f349dec3de8127314701217815d6fa1382bdefeee6905da4d2f0cd3f838d8712963ade0529c97f8d862cc753b9a9b463baf8bf532b70429a82e724b38a8464d4d499aa78e4df29d14485858dc77d66373c052c22898a59d006ed6c07f55813581db56632115afe74251c9644c7651cc0ca18874fedfbd12b6780e07f9525fb3163e448a860d351e436091d44b27904a37fadf0fc6b8a305bd5b82eb547ccb8c674dc7b1cca45579de1c24fa6c10f83c40ba9f9d9829fe0bcc0e92a53cd00c24678f481145da0dc037bd4d76271bdabe13fbd4c50e86a0c44e5885a661cdf666ad787db8a25c8483aca4a0e000bf91d2e99a9363516064a89cc49f5e542e1f0b074ddaf2655f6a091c913b499d36d4c1aa652fe9ba8a4f5260f63a173bf5b812786af5c6ded23104dcad35d8f523f5bf02fa21827af5be1944cc03fbf1768472927099b31d66b7c9a0bda1f25de153014fe4be5b0e4cc6b3b00f7aa7e4b7b66f4c0c3a2314563265359943f251bdfef1c8eb67b621c43dc7b2f81b10e9a05972cd20461f6a98e301d4b056cb87f70b8b0075f2da54c5b0dff1f720c0136f9adfb26245a23f1c59ff9db3d96f5812dd057fbc0db02d9b7ac5da5ef424e8936f8ddaa0aaae4e80fb623aee0b14450d89de65f5ebc1d45ff4192117b279be61b7c09cb4a4ca5ef1556632931dd392c5e04f2cd19d51775eaa3e71c191000e331ecf47d466879f84bb5bb477fd8e3cff2c87cc65709f84f023ccd82393429db7ed1e2ca7e36faa9ac3951a9c1c4dfef0d7c00177c81d846e86cbd441524a6528983c2c439e392b2e173882577e474ef5a991e23f93ed44785f8492e17bab298489b245edc0ec4320cfdb33d2170bf55458fe9b2b0b288c2a208f84426d4c2b3a2f186566cbba52b9cd162a7f7d46ab74f68522592578d67eb29b30470b9f73de3458d4ab1d71185752c5285a500d37e9c30ea005347e3ad4a96a6e747448c4e9585ed0c62f3ed5cd72cd27a3b330ab3a6f7c3f6315a97e0b93a1ea38e60476a4c0900cba8071cf096e4789b2fc0d914ebbefcb6bb47b82f1f712b1b57e72405e52579ce49369f5dcc8885aa6bbfd20f66f5f79d771fea18d90775a572d2a5e391394071486b66992c06b8a1599ba6e7866011a016ce1e65b5f01eda0327e1bf56785387f306a7a18f23370852152f9f6fb81c6bfa6ef998fd6b3fd11a5c2755df0b0efcd31f93cbe716c25de2b18d20e46341765c78b76927320c16df952f1bd66c16990f1ea0acd2f0d2cca2b627010f9320286f946b000d301d23e7b6ebd3ff79905cc1c32ef8e385358d2495970c6ef743d82f61bbddf0b12c4a2f244b4fe591f1aea2858c47d39eef3b266d5f6b3eb114a488c4103038525c532b4ace0f4bd2c9c85728032611d786241047e0b822fd1060f84d5377fe9604eba830f7d3c2e6e52011de387ece194c68b24d6952d63c2039aa4b0f57092a2d74edb949090844a002475c08f9cffcb65656b6237d8078989f2d65b066dbbe1834c9f482c164902b5becbcbe34bb191a50b83d5440c349466d5c0b7b9145763f501853f8618c633563d37366454db9b3bfa9fd2b1a1e5cd16505cb6e9607b598fb910c8c0bf1c72dc0ad562163a279dbcedabf853d97d784921ae76589199034e7f04808b085d1575a0b01474d74955594085ba6466d1e9d899a950bb3f12db44d47d62de0a892561fe7f493c7dba3ef4ebaef7990dece44a2612b472e4fcce31610e920025dc408805f2ef0ac019bfa532796011d789df85c1fe490ef50c4dbf6dd0784c3fdaf47c2370ad2c9a4501ba9eb7baf9303ace63968f58c8315740193ac3f9cfed8c349832d97a7e684dba469a7f76def00cb3ad25cdf3cc134eda045b79d207086814340a64956474b535947f5a3086d806046e7a3a5ebdda5e6357137dc4339653c188fa3fc68481aca20ab10ea635f568301ad83bd8b404dc35e25924fe1bd535ecd1ad06c659a9cc056f19738f3136b0267448fccbcd754c154dff6bc7edbb6eb5f7899c189f4ac509887fd20e87768a23d51c8049a44b9b46770f130b186517b1a70a82e60f2cab48a96fed5f61143ea09b2989e5dbbfae7b9cee3ea0a50fdf56753c001d81a1f229885cc37eb2f957eed7714cb2ffedd1ebfe10a1369019608fab9204edd73758651008c7514f2ba40877724f2e8c37bd09b4bcd36ca9525f55b88bef43c602105af27010caadab0ec67d2473dc7e039e02fcfb37507b8c2c99392fa60064d98bb12b08c9755436d97e13c8efac154dd4f3e0278ec76ca53658158c6db23b9f7f14ee7bea02f19768676c2dab2547272473f0d6559f36ba3f78548098bb75a3c031ab5dcb6cc6135ebfefa7f81d24058b5f420e619f958a3975e54004d0177f06e110c1c4afc4125fc58bb831553ce6beca1b1daf68174db9e0610c42f4ae7fd6c73106e1d4acfe223e01f3c16c468a763af1ba38be1e8d870aab709b9010035d6b6948d6828a2278287823b258af1aa530a88ced5e77000ecd8f8785b19a39333b3c73db05ad61f3391944f2b02cfa129d399d6b955bc8511606e6bb8bac4676a1f563b47c7a9636997bcb405238b2d041bbf11210e089fb86cc70038eac97c33335766b5937f56ba26b3778a4f571174b1efb7105b53f2b459184761c465a5f9f9297d27807a773a9fe94d525e392ef885fb275a9f07ddbf09a3598299d84e16b0e605d349f337dec9e228454dec48dd48d253fd2653e3782ca444d6c81e93b2fceac3ef8679b8ea7e01f9eb2ba65d25df49e96084627e3d8bfcb8ec5d6d998c97b29c3d55d8f8dc4b8ace506f97ab5c92055f4fda9d2eaf3db08ba1b16129fe544754969e4deb40b43983c59055c289b6ac510b44de8d86fb2143c41a374243da07a8b64c50133d3da0fd12a0d257faa3a5f8ef36ab5139a33ac2af1dcc832bc0d26fcdcb98a68ec3f80dc973b4ac203802404597c59fcbbc58bd8c1f42aec589e8f7fc51a3868c3081932f36c7e73b153d6acfb629885074460254fec5dd63743e65cb0315937a2b7e0b30243f364044c76048bca56fd2c35dde8ab37f3ede208708d1354ff4459151e12063d2b87de6645c0c8b0cbdcb70c4422f92e6a75b8dd56aa84093eac4b5bb9f052aa56ed2b574d63ab9dadf394244dd1da52298ac0d9ee91879fae8f5ff66af0d5ecfb4d899fd0c8fa9f8cf7e25541686abac9ac6116fbb2cb10f892caabd325ee10a161d1e3b604dee42e44a94b587843d81c4d495d2f64e4d69dbe6427f3696938623e4f4b5fd2a2b28ef194e02d047fa9e3fca0b11c242bf19cf3259df518718c52f3347635d50b6a4095045cdb10ec9a98b62b5c56b69e7bf48274ef87e487eca96b84e57bddf6c52905e85a8ddacd2cafa9b0352eec5a6d55d1ae5c37104249feeb1fd4bf7ba878826f3e99736c5f48baa55967f0e27f2200f078f77630216e0845a9e31a816dad508600d9289cbeadf06ecd44c19f08ce1c6e47fe74e9186a35b594a45e6c5fc324744ddfd1c636bd09e67fc329c56b431147f2390973b56d31b1ea834f9882057baf29858e949e5ace665bf9fd05583e1d799604e9a6372f489e399646ce17f9488b5d1ee93fa7d75bd1308e12ae6c7a72c624c8da0b22b9ba6a41d7f337bb0cba767e3fb6b94042c12bb9790f3520224053ba41d533fdea6fad1d06b609ddfedc80de3e58102e841c3847a9bfafc9da2e4be8ac99342648c32410e07d1b0487546434891bc9880c10d71bff60e0a2f8090ceff82bb7d7e29c59e40fb422570f80f0154a7738fd1a8cbae836c19c3532e16eaebf660aa7aa0ace358d7c5a6ed91eccb5f4d038245c4a60e43952dfaba606238e2a0c1c092d21a1b2a3f1cd01914323b2a813c4d566406cf97af10e9db8fac73c3e92d40a3a110e32f5c7b59fc2404d7dc021a4bbb95b13ba5b0062fd8149c4c4379794c1c9e29ccc91cab5c6141ad475da27d2c4a194f17b8040dac756a593e7071f4be9feb477288de1be4c0a7e16fa629ab45d4c347b4420697ad7599c0a6cd9209c964b805abb9a3209c4bd2a22b8fbaa4feec796d0c408c9712ad681a72cb1544620dff5fe1bfdae8e93e81ed7973114ed0c32960c81405551e1a235b89c27f284f1ea3a60226bc203a331f9adfd1cfcab61bbef4d1af033d013e402a68e1a52e8c5400db1212e1bdd0685c7e5cb89d052a53050262a9c341ac6535b83ac3de95824ddb7cf46501749a4c4bbee7e1bf4d948b8d6d1e6e1804c2a5772e17ff9b8661ed4515041b8f6a98710283960bf9ae21cc4ef6a7633d846e790b2b934e3f04302c40ef506d4ec7e004e075aadecd44632c228afe19e30c373d28252c2eac3404d0a5739a5c9ec909dfbdaf373b8dd55f8e3e5343a52434d015d52604ff3e650119f0e2f0e93c8fb8042f8c59ffb7dbee"})
sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f2, 0x10, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0xbf, 0x5, 0xa0, 0x0, 0x1000002, 0x80010, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x81, 0x2, @perf_config_ext={0x7fff, 0xcd66}, 0x10, 0x7, 0x7fff, 0x3, 0x9b6c, 0x8001, 0x6000, 0x0, 0x1e3, 0x0, 0xffffffffffffffe2}, 0xffffffffffffffff, 0x8, r2, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0)
perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x7, 0x6, 0x7, 0x5, 0x0, 0x0, 0x40, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f00000002c0), 0xd}, 0x402, 0xffffffff, 0xe0, 0x2, 0x80000001, 0x5, 0x7, 0x0, 0xb7, 0x0, 0x81}, 0x0, 0x1, r1, 0xa)
r4 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x0)
syncfs(r4)
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000480), &(0x7f00000004c0), 0x2, 0x3)

16:26:36 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x12000000)

16:26:36 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xfffffff0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:26:36 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:26:36 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:26:36 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x10, r3, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r4, r1, 0x0, 0x401)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:26:36 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2942.909630] loop7: detected capacity change from 0 to 40
[ 2942.909795] loop2: detected capacity change from 0 to 40
[ 2942.915859] FAT-fs (loop2): bogus number of reserved sectors
[ 2942.916339] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2942.952906] loop3: detected capacity change from 0 to 40
16:26:36 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2943.006483] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:26:36 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x12010000)

[ 2943.031031] loop2: detected capacity change from 0 to 40
16:26:36 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='\x17?\x17~\x82\xd5\xa4?\\\xf8I\x01\xc0\xc2\x802\xf4\vR\xc9\f\xa3\v\xe2J9\xbewoW\xc5\x90\x1eg\xf5\xb6\x9a`\xf1Y\xe1\xf5\x9b\xa9\xc7A\xefT\x93\xb7\xc8\xfdh>\x8c\x9b\xd3\xfb\x9d\x0e\x8f\x9d\xea\xd3\xcal-AS4\xdd\\\xa4\xb4\xd0\xf8dc\xd2\x89\xa4\x9e\x10<hk7I\x8fD\x1bx\xee\xeb\x14\xf4\xaar\xd1\x8c8\x93+\xf7\xd3t\xf7\x97y\xf8\xdf_\xf0\xbb\r\xdc\'\x02\xa1\x86A!\xa9\xb8\xdb\xd2\x81\x06\xe5\xab\xd9\x00]0|\x99\xdby\x1d9L\x1a;\x16\x03p\x8b\x04A\xce\xfb-\xde\x0e\x8fzQP\xcd\xd0\xb9Jr\x82\x8e#\xc1 \xe8m\xe3TO4\xc9\xfb@!\xf1\xd1\x93t\x00\x12\x0f\xe2\xaf\x12\x05\xb8\x18\xb7_J\x98AO\x1a\x8d\xaa\x7f?CCm\xc9W\xaa\x83\xe5k\xf47\xdb\xc0\xea\xaa+\xd7\x9cL\xf5\xd1\x9b\x95PU/\x04\xd1\xb7HrK\x1b@\xce\xf4\x11}\v\xb8SO5{\x13\xb9\x13\xc2\xac\xf1\xad=\xfe\xd9%\xb0\xf0;\xb0\x17\xa8E\a|\b\x87\xb0#`\xff\x0e\x8a', &(0x7f0000000080)='./file0\x00', r0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r1, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

[ 2943.077252] FAT-fs (loop2): bogus number of reserved sectors
[ 2943.078319] FAT-fs (loop2): Can't find a valid FAT filesystem
16:26:36 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x18000000)

16:26:36 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
write$binfmt_aout(r2, &(0x7f0000000180)={{0x0, 0x5, 0x5, 0x1e9, 0x240, 0x80000000, 0x398, 0x3}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1a20)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[ 2943.237171] loop3: detected capacity change from 0 to 40
[ 2943.312134] syz-executor.3: attempt to access beyond end of device
[ 2943.312134] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2943.313137] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:26:50 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:26:50 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x0, 0x81, 0x3f, 0x0, 0x1, 0x5820c, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0xc040, 0xfffffffffffffff8, 0x10000, 0x7, 0x9, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0x5, r1, 0x1)
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
fchdir(r1)

16:26:50 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0xffffffff, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:26:50 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x21030000)

16:26:50 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:26:50 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x2}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:26:50 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000001800)=""/44)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001600)={{{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@local}, 0x0, @in=@private}}, &(0x7f0000001700)=0xe8)
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000000c0)='./file1\x00', 0x1, 0x7, &(0x7f0000001540)=[{&(0x7f0000000180)="3f7d35fdc33069809a6f3119bfa87a52ec1868996149c1289ad1c6beb57366120458971eaee8a642d8f786907c730d7fbed1afcc0352d373be871406fd082c480d2156f4c3dd4cc14a3f6ed469833fee10b36eb017a48625e5456fe9dea2c343157092c42ba4bed9d850e67423607abd0f3366ee4727f3add189000207a03a6fd43bb44dc2b5f23660a64c61456bae60602b0cb88eac5395bc24a68e3214e967c0577fc0692f21c37d6781fb4c0bfe3308bef5e5494a128ce08f4763580bfc7c63868f179059ae3ba0d849099aeb3452a0c80e85b2ed408fcb6d9670e9ee", 0xde, 0x3bc5}, {&(0x7f0000000280)="830c6a3b2fb70e32e06c765f0554dae9d512071617ef6ea9df1db5e5034c06a6c7e2fe2a25e676d25492cc9fc130c857809f03e936d2fe798a21948dd062c4ca043086d262e970b8e99c7c72ed9c1e0773aa0f1e8c3bdc943e", 0x59, 0x9}, {&(0x7f0000000300)="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", 0x1000, 0x9}, {&(0x7f0000001300)="bd4925c7aedb2b687fce35ec6ae87f2200ea4a8a90e68d23baca38ec51d301352c080c8b698f1cc0f02371db4827db5bebeadc83789f4cfe7d3434399baf6d12a9b92e53df05c74bdc667f1cf3281c537b35fe964b4e294fb085960648c38c968eb579", 0x63, 0x8}, {&(0x7f0000001380)="8e7da6bbf3e8ec7b6cb6b6d1cef1b3b1333ba99d08b3d9b84f5e67ea12c1f6209b02ee08f592e595f84a09ca030e005e8ed77238dc487a0875f8479c5fb8810a31eae9fbfb70dba3eca123f583e5a21168404be450f2b2e39320b5d2b9c12269e264f7f89485fee4bf51651788593da736207c341b78c7e3143bcd1a7d0d3637afd7cf229376bfa98426bab0dee14c4564d08150d31d695d076f85", 0x9b, 0x8}, {&(0x7f0000001440)="ebf16cd100b0a3a1e9c0a6e3cdd07bd694b437716d23d571fec8f138c685f3b6e4585d4099f2a83f269478368e31c4c2f862ab99a71bc9ab1e2a265b356aac563dc12a9b40228f51e8882dc9ffcd2418c0f3e2b3", 0x54, 0x8}, {&(0x7f00000014c0)="4336ca1d8784aac0b37ff9b3c8adbffb03fa93078971126f2d5c14d2087b3e97e4457fb473527ce363a5d76b8fd7c71c5b064b5ceec2d3f81f6f819df9cae42bb18bbd661659a92c2fc832d6742f0acbe2b0d272af2c766eebdce51bdea01fda2142c47d82fa9fc09d8a29", 0x6b, 0x2}], 0x80040, &(0x7f0000001740)={[{@bh}, {@nojournal_checksum}, {@journal_async_commit}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x273c00000000}}, {}, {@resuid={'resuid', 0x3d, r2}}, {@barrier_val={'barrier', 0x3d, 0x9}}], [{@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:26:50 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2957.584298] loop2: detected capacity change from 0 to 40
[ 2957.587152] loop3: detected capacity change from 0 to 40
[ 2957.602446] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2957.615414] FAT-fs (loop2): bogus number of reserved sectors
[ 2957.616449] FAT-fs (loop2): Can't find a valid FAT filesystem
16:26:50 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x8d040000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:26:50 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x24000000)

16:26:50 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2957.770642] syz-executor.3: attempt to access beyond end of device
[ 2957.770642] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2957.772366] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2957.800432] loop2: detected capacity change from 0 to 40
[ 2957.836794] FAT-fs (loop2): bogus number of reserved sectors
[ 2957.837891] FAT-fs (loop2): Can't find a valid FAT filesystem
16:26:51 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x2}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:26:51 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/user\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x10080, 0x190)
fcntl$dupfd(r1, 0x0, r2)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000040))
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

[ 2957.882763] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:26:51 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x2e000000)

16:26:51 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x521042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x2, 0x88, &(0x7f0000000180)="662dbf738b87def39917331fc21063b3231eaa6b0b3e2ce52a9f45952ad1cbbad26790b2d8ec24e8e466ea3e2d13f0ac9834b98e004015e39dc7fed73c812e250e6eb76f5b85dfecbb8c841c58c980eb276b6e4fb04c6e5a1739984ba8c83c15197ab84f23bf8e8c1dd32b4a959f13f9c185675016df2774556d18e948f434db3622c4afdae640ba"})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:26:51 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x9a140000, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 2957.976633] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:26:51 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xc0ed0000, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 2958.034816] loop3: detected capacity change from 0 to 40
[ 2958.050352] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:26:51 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:26:51 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:26:51 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
openat(r1, &(0x7f0000000400)='./file0\x00', 0x40, 0x140)
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/asound/seq/clients\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000080603000000050001000700"/28], 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="3bbcd62082fe0cf0d005ebb42cb3fd0241412313e0abd1167860c51ec01ae80aa0a5c00988b830d6366e130bdedb71803730c29a412c983c8c9a093f4a03a9d90f4f794846da81287062fbc8d43a0de5235d1225d3ee4f7c525ad62bb412b40535186bf1c764d8e93075", 0x6a}, {&(0x7f0000000200)="4aa707f41a004db21ed7ad34fb74d5a5e4b037f0aea1d7d015454bd680c867fe1378c0c0987af14ee457d836b33692b2313b1e935426f18668d50458aa3320db4b6def5af71125b561d1df7aebcb5ea3a754778c137dda6f9731b699567bd540b8acb474bcaa8044ed9629c2f66c1624", 0x70}], 0x2, &(0x7f00000002c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}, 0x4000)

[ 2958.127647] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2958.226012] loop2: detected capacity change from 0 to 40
[ 2958.230412] FAT-fs (loop2): bogus number of reserved sectors
[ 2958.230825] FAT-fs (loop2): Can't find a valid FAT filesystem
16:27:06 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:27:06 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:27:06 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x3}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:27:06 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17, 0x55}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(r0, &(0x7f0000000000)='./file1\x00', 0x200002, 0x31)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80000, 0x197)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x9)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r4, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000180)=@v2={0x2, @aes256, 0x8, '\x00', @d})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0)
close(r3)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r5, r2, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:27:06 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xf9fdffff, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 2972.850000] loop2: detected capacity change from 0 to 40
[ 2972.852926] FAT-fs (loop2): bogus number of reserved sectors
[ 2972.853401] FAT-fs (loop2): Can't find a valid FAT filesystem
16:27:06 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:27:06 executing program 6:
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000100)=0x4)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {}, [{}, {}], {}, [{}, {}, {}]}, 0x4c, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r1, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

16:27:06 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x3f000000)

[ 2972.867489] loop3: detected capacity change from 0 to 40
[ 2972.869858] FAT-fs (loop3): bogus number of reserved sectors
[ 2972.870333] FAT-fs (loop3): Can't find a valid FAT filesystem
16:27:06 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x4a300000)

[ 2972.955965] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:27:06 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:27:06 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xffffe000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:27:06 executing program 6:
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000000)={&(0x7f0000000080)=""/128, 0x80})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=<r0=>0x0)
pidfd_open(r0, 0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00')
r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000140)=0xfffffffc)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x81, 0x3, 0x0, 0x7e, 0x0, 0x3, 0xc0000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000180), 0xa}, 0x4, 0x4, 0x7fffffff, 0x7, 0x7fff, 0x482, 0x7ff, 0x0, 0x7, 0x0, 0x7ff}, 0x0, 0xa, r2, 0x3)
perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x4, 0x3, 0x0, 0x3, 0x0, 0x1000, 0x20622, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0xffffffffffffffff, 0x40}, 0x2040, 0x63, 0x4, 0x4, 0x3, 0x9, 0x400, 0x0, 0x7, 0x0, 0x80}, 0xffffffffffffffff, 0x8, r1, 0xb)
readv(r1, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
close(r3)

[ 2973.054647] loop3: detected capacity change from 0 to 40
[ 2973.062273] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2973.064940] loop2: detected capacity change from 0 to 40
[ 2973.069883] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value
[ 2973.071892] FAT-fs (loop2): bogus number of reserved sectors
[ 2973.072457] FAT-fs (loop2): Can't find a valid FAT filesystem
16:27:06 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x6}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:27:06 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:27:06 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x55050000)

16:27:06 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xfffffdf9, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 2973.311329] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:27:18 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2985.476561] loop2: detected capacity change from 0 to 40
16:27:18 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:27:18 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x80040000)

16:27:18 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0xf}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:27:18 executing program 6:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={<r0=>0x0}, &(0x7f0000000100)=0xc)
r1 = syz_open_procfs(r0, &(0x7f0000000040)='fdinfo/4\x00')
readv(r1, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

16:27:18 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x401, 0x3)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
signalfd(0xffffffffffffffff, &(0x7f0000000640)={[0x6]}, 0x8)
syz_open_dev$evdev(&(0x7f0000000200), 0x80000001, 0x400)
pread64(r3, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x8, 0x1, 0x1, @empty, @empty, 0x7800, 0x1, 0x8, 0x1}})
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf251000080039008fdc0000080000e1743372e490df7b87aea8cc0e9b960555810498812454de8cbf178180df9e86eb318044f14e089547fdb326c5a73940b17daf99a73f1257bc1dcaaea50a723b6e604342c62f0b08da835c29ad9b1b08053836466e", @ANYBLOB="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", @ANYBLOB="08002c000400000005002d00350000000500330002000000080034000300000005002d000100000005002e0000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4004090}, 0x9d2c5265731e82fa)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
execve(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000500)=[&(0x7f0000000400)='smaps\x00', &(0x7f0000000440)='ip6tnl0\x00', &(0x7f0000000480)='sit0\x00', &(0x7f00000004c0)='-\'/\x00'], &(0x7f00000005c0)=[&(0x7f0000000540)='vfat\x00', &(0x7f0000000580)='\x00'])

16:27:18 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:27:18 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xffffff7f, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 2985.498924] FAT-fs (loop2): bogus number of reserved sectors
[ 2985.499743] FAT-fs (loop2): Can't find a valid FAT filesystem
16:27:18 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x8cffffff)

[ 2985.517733] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:27:18 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 2985.549344] loop3: detected capacity change from 0 to 40
16:27:18 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x2}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 2985.590298] loop2: detected capacity change from 0 to 40
[ 2985.600155] FAT-fs (loop2): invalid media value (0x00)
[ 2985.600716] FAT-fs (loop2): Can't find a valid FAT filesystem
16:27:18 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xa1ffffff)

16:27:18 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:27:18 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00')
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xf}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1a}]}, 0x2c}}, 0x0)
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0085f888cc539ed6d425a39cc32c48883a3c4c8037e3d491e44de3ce385a56037c65a14e98d689b0cffc80266b978b2c28e715ad6cdee6e1ef6969f17897c64f80c5d92860dc5291b1ee6e7bc544d0e02897c563c29efb90f37b4ae3ac38e100"/112, @ANYRES16=r3, @ANYBLOB="000028bd7000fddbdf25020000000800010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x8801)

[ 2985.654995] syz-executor.3: attempt to access beyond end of device
[ 2985.654995] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2985.656104] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2985.743305] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2985.783016] syz-executor.3: attempt to access beyond end of device
[ 2985.783016] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2985.783834] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:27:32 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:27:32 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:27:32 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x67}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:27:32 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:27:32 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x3}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:27:32 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xe4ffffff)

16:27:32 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/106, 0x6a, 0x8)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40, 0xbb31383ae9c276a9)
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

16:27:32 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
chroot(&(0x7f0000000040)='./file0\x00')
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0xfe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(0x0, 0x0, 0x0, r2, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0)
write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r2, @ANYRESHEX=r3, @ANYRES32=r0], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[ 2999.075430] loop3: detected capacity change from 0 to 40
[ 2999.088997] FAT-fs (loop7): bogus number of reserved sectors
[ 2999.089828] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2999.090946] loop2: detected capacity change from 0 to 40
[ 2999.101174] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2999.106791] FAT-fs (loop2): invalid media value (0x00)
[ 2999.107524] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2999.115647] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:27:32 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xf6ffffff)

16:27:32 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:27:32 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
r1 = open_tree(r0, &(0x7f00000002c0)='./file0\x00', 0x80101)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000003c0)="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")
preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/76, 0x4c}, {&(0x7f00000000c0)=""/207, 0xcf}, {&(0x7f00000001c0)=""/165, 0xa5}], 0x3, 0x1, 0x1f)
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

16:27:32 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:27:32 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xedc000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:27:32 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
symlinkat(&(0x7f0000000040)='./file1\x00', r1, &(0x7f00000000c0)='./file1\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x60}}, 0x8800)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000001e00000000003b00000008000300", @ANYRES32, @ANYBLOB="2b003300d0000000ffffffffffff0802110000005050505050500000000425030000007606000000000000"], 0x48}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000001e00000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="2b003300d0000000ffffffffffff0802110000005050505050500000000425030000007606000000000000"], 0x48}}, 0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x410, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x6}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x44, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x11, 0x1, @random="d5ec6a3230a969f147faaa3fbf"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffffc}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x14e}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x401}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x944}, {0x8, 0x0, 0x1000}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x80000001}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2ac, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x42, 0x0, "5a08b3ffdaa0cf7930e03860d5bc3be412ef01c47615df5c94bc3cb4b7d90a77be29854efd28c7a48e60148d6b9b2f8fe5c3aca6b79048c9350eaf710e6b"}, @NL80211_BAND_5GHZ={0x40, 0x1, "6877d216cddc886210e466ed08af188efc812580d52ba1c61600126f7dec0df99c91ba27ca06a6573f6f07a4e309721a724e87ec0346efc53f5fddcf"}, @NL80211_BAND_60GHZ={0x80, 0x2, "f9e7f7d7cb21858403cab63f17de55e81c9ffeeb0a34b475f2a9d27a2533f17e9c1d9822b034ad8e73cb23a852b1caa30907763f358c086598fe64a8155288cba3857eba4e9f6c2c59286023c2bbc41fc9ae504a651bf9be1d426380d1537898abca92a2ed702755a63113911c83a1a8f35f1dede864ce28cd1078ec"}, @NL80211_BAND_60GHZ={0xe1, 0x2, "51023095517f43cfc64ec43e4888b87105758028a23cb66fa5794dac16b64fd09afe7cb7d683e115af6fdfb9363acad95880e3bfe39608218d8748e3ebcb66437d1297a57c62db41a217d3443ddf8a3756c6b821246fadb9b771f9d068d4bbaaa085fd652fed1072584a4e286b6ad252dbba7bfa4d6db786e258271775b763bcd435064b830874ad440d370662b52dfe699ba1b08053b94499a202568daee248422d19ee7e6cdcfef0b9663392a67be19bfaa39ef58f343cf871b1ccea67663e83c78000c9457d9ca94eac9985689d2899d406685dee8717a329e9e754"}, @NL80211_BAND_5GHZ={0xbe, 0x1, "375032ce7cb0bf43c6039048c1cb3b943532785bac97cbba5bf1043f9812a1c03b158685d5413a6097494c1a83aca55c0f9013fb3db7bd269060cd0cbb3bbbb59807f725d20fa46457e0ca2c41796c78a2eac8017e33479290ede3c83da57b283570ae3a122803c77d6ff330ff41e2baacf7042e7fc621d121e3aa0ce460b6ea7bdce98f766708bc5eeb6293d9ec0405ceb8a885bc3ceaed3c9893bf7983ee4c977eef16abe500450f7b43df30cc4c22046098fa303afca97faa"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x8c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x87, 0x2, "90c90b57a98a5f81b52a18090a84c374b7b959ab280d1b172895f2a628695a91db24b341be4cfed33b264b947920e878ee6a5f81bc2b4199fc817919741f71211d2cd9260d5e1b2aedb9f5c61e9425aaf6ddeea2d7243b7919a6910b7554e350b85cfbcb0ff4e1bd53228eed53e0189de9135932fb9a806023208510448d5c0c5ff1d0"}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x5}]}, 0x410}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:27:32 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2999.406721] loop2: detected capacity change from 0 to 40
[ 2999.413861] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2999.441604] FAT-fs (loop2): invalid media value (0x00)
[ 2999.442404] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2999.465816] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 2999.473184] loop3: detected capacity change from 0 to 40
[ 2999.657595] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting
[ 2999.677357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2999.678318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2999.741598] syz-executor.3: attempt to access beyond end of device
[ 2999.741598] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2999.743265] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2999.801878] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting
[ 2999.810889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2999.811832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2999.822617] syz-executor.3: attempt to access beyond end of device
[ 2999.822617] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2999.824311] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:27:45 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x0, 0x2}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:27:45 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x5}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:27:45 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:27:45 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xfbffffff)

16:27:45 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x1000000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:27:45 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)
pipe2(&(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)={0x100004, 0x0, 0x0, {r1}}, 0x20)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0)
r3 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x341800, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0)
syz_open_dev$vcsa(&(0x7f0000000040), 0xe36, 0x80)

16:27:45 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:27:45 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x101600, 0xc8)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
openat(r3, &(0x7f00000000c0)='./file0\x00', 0x800, 0xa0)
sendfile(r2, r1, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat(r0, &(0x7f0000000040)='./file1\x00', 0x40040, 0x2)

[ 3012.745725] loop3: detected capacity change from 0 to 40
[ 3012.764382] loop2: detected capacity change from 0 to 40
16:27:45 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xfeffffff)

[ 3012.778987] FAT-fs (loop7): bogus number of reserved sectors
[ 3012.779655] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 3012.785316] FAT-fs (loop2): invalid media value (0x00)
[ 3012.786072] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 3012.790687] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 3012.800758] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 3012.832379] syz-executor.3: attempt to access beyond end of device
[ 3012.832379] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3012.833495] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:27:46 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x6}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:27:46 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:27:46 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x8000000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:27:46 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
syz_io_uring_setup(0x52e0, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000000)=<r1=>0x0)
syz_io_uring_submit(r0, r1, &(0x7f00000004c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r2}}, 0x2)
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r4, r3, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:27:46 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xffff8000)

[ 3012.960869] loop2: detected capacity change from 0 to 40
[ 3012.972969] FAT-fs (loop2): invalid media value (0x00)
[ 3012.973576] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 3012.977044] loop3: detected capacity change from 0 to 40
[ 3012.995275] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:27:46 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x7}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:27:46 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 3013.098193] syz-executor.3: attempt to access beyond end of device
[ 3013.098193] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3013.099536] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 3013.138051] loop2: detected capacity change from 0 to 40
[ 3013.147967] FAT-fs (loop2): invalid media value (0x00)
[ 3013.148416] FAT-fs (loop2): Can't find a valid FAT filesystem
16:27:46 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x40000000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:27:46 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r1, &(0x7f0000000880)=[{&(0x7f0000000180)=""/180, 0xb4}], 0x1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan1\x00', <r7=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x1c, r6, 0x303, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r3, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20004880)

[ 3013.197455] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:28:01 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xfffff000)

16:28:01 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000000c0)={0x1, 0x45, &(0x7f0000000280)="634b9f1a370b7f44d3caa0dd4066ca24a043ac2e1c1ff013c77b4b53490e5779bc2320155513c7557ab68c4ba8babf19189a6a7d885a4ce20943c1ee79f0eebb0ac76003f6"})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x2, 0xf1, &(0x7f0000000180)="4766a01e503d3d1048b28cb6cc069e057e1dba33d493dfbc44a5e0554bbe49a8398f772afd0c0bbc69d317b2f14ceed4c03b39e4e080499959d798db13fb94e1a5f4a9fa77b578a9229eaee47d016b81c0e1d64096e7a14c4d411f2e34346c49e880e9c49a1ba4bd4ec9ca8c9fd74563a949bd8c50ee0de958159293b3b26809e06c1592e8d40591d96b40b4558093991e44212342c4596024dd33742b6078c32a3dff20dcdf37ed962f06da72d4c6bfdca9c29d158917179a54e5bbdb7b57ee93831be1d0d10fefdf882ed048d011d9bd20844eecaff7687304a1f0fcff8b637cd62536b5df9a77b7f6de47d05108e1cb"})
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:28:01 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x9}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:28:01 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:28:01 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x0, 0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:28:01 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:28:01 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000080))
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2e}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)

16:28:01 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xe0ffff00000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 3027.990785] loop2: detected capacity change from 0 to 40
[ 3027.996545] FAT-fs (loop7): bogus number of reserved sectors
[ 3027.996946] FAT-fs (loop7): Can't find a valid FAT filesystem
16:28:01 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0xf}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 3028.000701] FAT-fs (loop2): bogus number of FAT sectors
[ 3028.001088] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 3028.033999] loop3: detected capacity change from 0 to 40
16:28:01 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xffffff7f)

16:28:01 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 3028.071774] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:28:01 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'})
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

[ 3028.152856] loop2: detected capacity change from 0 to 40
[ 3028.164043] FAT-fs (loop2): bogus number of FAT sectors
[ 3028.164971] FAT-fs (loop2): Can't find a valid FAT filesystem
16:28:01 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:28:01 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xffffff8c)

[ 3028.221172] syz-executor.3: attempt to access beyond end of device
[ 3028.221172] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3028.222092] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:28:01 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 3028.285699] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:28:14 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
preadv2(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/138, 0x8a}, {&(0x7f0000000100)=""/60, 0x3c}], 0x2, 0x7, 0xb17, 0x13)
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

16:28:14 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x0, 0x6}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:28:14 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:28:14 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
r3 = fspick(r2, &(0x7f0000000240)='./file0/file0\x00', 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r5, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r6, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, 0x0)
sendfile(r6, r3, &(0x7f0000000300)=0x29da00, 0x6)
openat(r0, &(0x7f0000000200)='./file1\x00', 0x60500, 0x12f)
sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000f70308002cbd700005dcdf25070000000d0000002e2f4ad7839d9b3966696c65312e2f66696c6530c3e0d0038a86569bc0e1efd2f9e6363d0177ded8022334b63621e29d74e7697f64f5e69d13e98a56813e120000000000000000ad94e22bf777"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
sendfile(r4, r1, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:28:14 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:28:14 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xffffffa1)

16:28:14 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x0, 0x2}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:28:14 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 3040.867681] loop2: detected capacity change from 0 to 40
[ 3040.870955] FAT-fs (loop2): bogus number of FAT sectors
[ 3040.871343] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 3040.879476] loop3: detected capacity change from 0 to 40
[ 3040.893774] FAT-fs (loop7): bogus number of reserved sectors
[ 3040.894159] FAT-fs (loop7): Can't find a valid FAT filesystem
16:28:14 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 3040.905391] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:28:14 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xffffffe4)

[ 3040.997506] loop2: detected capacity change from 0 to 40
16:28:14 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
r1 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x0)
fallocate(r1, 0x19, 0x7, 0x0)
ppoll(&(0x7f0000000040)=[{r0, 0x40}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x1]}, 0x8)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty, @initdev}, &(0x7f00000001c0)=0xc)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r5=>0x0})
bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c040000", @ANYRES16=r2, @ANYBLOB="000427bd7000fedbdf250100000024000300000000000000000000000000000000000000000000000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="33109fcc672d08ee9953d90629a389e72ade34270a89fa10caf45ead4d73b08e4da32681414565460276577d575993157456a7b2573da5b3464efc3a7583368b1983c9b9fa94671007d1171c5cba168e625079a512f171156f0895373abdd21075b1370fd4f25f0568962ad9230daffe1dd2ff8e5657a9be5e03570e5cd093b9e437babcc564db1854b08c45e3ae0ebdd070416876c040279b62be0b1d89e800000000000000"], 0x46c}, 0x1, 0x0, 0x0, 0x20000010}, 0x804)
fallocate(r0, 0x1, 0x1, 0x2)
r6 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r7=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', r7, 0x29, 0x1, 0x1f, 0x3, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x80, 0x1, 0x5, 0x1}})
fallocate(r6, 0x60, 0xff, 0x4)
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1)

16:28:14 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x300000000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:28:14 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x0, 0x3}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:28:14 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 3041.130594] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 3041.147362] loop2: detected capacity change from 0 to 40
[ 3041.192690] syz-executor.3: attempt to access beyond end of device
[ 3041.192690] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3041.193615] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:28:14 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 3041.280046] loop2: detected capacity change from 0 to 40
[ 3055.586966] loop3: detected capacity change from 0 to 39
[ 3055.589927] loop2: detected capacity change from 0 to 40
[ 3055.596933] FAT-fs (loop3): bogus logical sector size 63143
[ 3055.597472] FAT-fs (loop3): Can't find a valid FAT filesystem
16:28:28 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xfffffff6)

16:28:28 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:28:28 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:28:28 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x8268}}, './file0\x00'})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000011}, 0x24000040)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r5, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
sendmmsg$sock(r2, &(0x7f0000004dc0)=[{{&(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)="986e0ffe7bb1b18adeffd1c43b65c10fde6571fa7edbc25d00cf50ad337344d558d877550dfaf7304af1eb07fbe7d16e9a8e23a52a6e56a33b19c99ca923fb6d121b074330f4f8624c9a1820", 0x4c}, {&(0x7f0000000280)="f427996b8f65f05ad9ede3befd44a8a450113c3ba29f207346dc29c7568fb15ee239cfac3c7e1a433a05d94eb7d141971816618f1b04c8ba8e3ae923d0d64ebf76dd477f", 0x44}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000003c0)="d5f70c2f0e164e1f372d9b9a65d14bbdc1dda82a770b967ad4e80085", 0x1c}, {&(0x7f0000000400)="fa275bc4386908ee2145b51657962de0e75bc3499f0a622818735770cc472e5f9656cb78dabf4aeda785e5e48a9eefcecf43d162eac86f0a083101ddfcb9c19e0cbea82b2c38744ae225fc5737a18349813b4f5cf7", 0x55}], 0x5, &(0x7f0000000500)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x30}}, {{&(0x7f0000000540)=@hci={0x1f, 0x2, 0x3}, 0x80, &(0x7f0000000740)=[{&(0x7f00000005c0)="c1c67a4edaf28bbb9108b00b9d037c05b18942b421ab1f810dd5fef88f5b3c644307adcb97a65a19dc9add00cfea995ff2f58cc88e4d99a2f2d5bef658448f7aabb749d0b8c951c264ba0f7f32c5097e89265f771cada151", 0x58}, {&(0x7f0000000640)="d7c69160e6d1379d19b3eb5964671021eb6c20a570b1d18523cd8cb4fbdc4b07d677096bdf84c6", 0x27}, {&(0x7f0000000680)="d36ff3569701c14c5164860b1de5da1354f0c0c45c44a5e40a8ef35db1d371f86cfbdf5d30a52d37455655875cd4cd1075bbc3550d60754a5dbb63f9fcee13e677bf0ab15bcb796a60703292ecd581407ddb36c0206cdabcc6ea4a2bea07520db4e8d55f13914aaeff60aac43ca60095e1518826e3648a9cb98bdae43d7b09a49f63556c554abb", 0x87}], 0x3, &(0x7f0000000780)=[@mark={{0x14, 0x1, 0x24, 0x879}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xbd12}}, @mark={{0x14, 0x1, 0x24, 0x5ce}}], 0x78}}, {{&(0x7f0000000800)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000018c0)="5a5c5edda23d7d5e040e47e25f7501fb7d278c39f306986c2cc1b22a4b046d04c41f2161a7f9bd0cce60c305ec2a43f9016ba6e0350f7a46043030849ae286763e0fc9e6193c452a8f18279dcb3c93ef4c296bf1eb66571e524b9e5404835570cfc77748abd82b7221c012ac5303d886ad6c8272642a45bd7f5922194af859ed07f7241324653fd0357c4b4269ea72104b0d4b13125a7082a7893a47089baa9d835055287e611d51766702178a22b334d92897c2ca3f6c8cf378a57248ffb42664bf73ed511ecf5543fae06832669a2e2a238e8a83edf45b241aff137d5081ad", 0xe0}, {&(0x7f00000019c0)="198f0db8cc09ecbd2ee45d490f3d7b38859873164057bae7fbeb08ea297d9694804dd1a98080a69435d22c412fe049f1057db35eac36e474dd3a203b7c49571917f5850f4977c9c42f2ffd8db0b8e6ca41e3b4cfbc055ebb006a2f32f0c4981101fa12aa5746d41bc9e38cd7123fcd5d62890b110320e85cb61876f3dcbf04f2bdb45020679e8411a7d38eaab4e7ec751899ba365249e8527392243a75a06157dbd7cc3a67a9eb79c88afbc9de10d483d80f00b146a7ad86b621edb1b54cd2e0ba0669f17143f3db9fcd13b88f7796a445e942bd62f65a72900ae8d486a6", 0xde}], 0x2, &(0x7f0000001b00)=[@txtime={{0x18, 0x1, 0x3d, 0x3ff}}], 0x18}}, {{&(0x7f0000001b40)=@sco, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001bc0)}], 0x1}}, {{&(0x7f0000001c40)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @mcast1, 0xffffffff}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001cc0)="c6b2a878104850614a2f205bf887a78b06b947a5af4491291278e50974b50d0b1d5f2010b669bd3884e8545bea08a96878ffdb9679fb2728610a2b1700f1ee48fc83f640c9ef26c3422606b6a0c20868b1edccfcc0928303f5ce1e34ebef8d84e6b264fc296c326f9daaffa0066a161267cabb2b197171044b3ee5c34cbc4c2851ae5cab40936ed4094d1c1257c705b30ded3e9dd51e3ce047428deb51133f97d97013aa1072", 0xa6}, {&(0x7f0000001d80)="bb9c15542b405ece4b51f3b5dcfddeb8c4cb205e8844bce148e02223838857eedf501e14b5df220907c593e36e81f22844f9bde7e6ef6adc4408f421bd628018885994f07762ad16d0c0863e3cae958d24ada805b7f04910d5830befadc0a7844eef1b6da2a58da8dd3dcb2b452179f80dfa60c8857b1f307802465ad6a9509d00c903d9caf808eb869286aae594e1c70f6c424f452cc4678b7d2b1726e01b077b9939d0ccfadb062b685389d92ca1fcc8bf7acde119c24facd8d4e7ea0f1a97761cf0dd6c7034181b84903e584d7b60a327b2ffb3a1fb8745", 0xd9}, {&(0x7f0000001e80)="95bbc91e63346ad2953316ed81de5938f04c549e4a31d1e113cc646e0d586ed0c6e3d5f2483d9f95a95914b2a254a08223b2d44b3c44a827584b28bb8463c7e7929c02d175781c41c526c9ce891b6eccd86b75cc07780a5467fec7747d99eace590fe34a041cc6", 0x67}, {&(0x7f0000001f00)="dae4a4ce03bd00ce3704f1985a45371e0f33cdf1ae38f4888176472b179a76fbe425afa397c47f24574bca3732d9d09900ff38e8259fb2ebf30e8baf22d0d93fa6dd2d40d2a2e3cb1e85cdb17030099686608852bee83327a57c15a3a18b0f1abb3fd8d18c686e55068dc1cbea67f672c08dafa3799bda3a77d01d23b802756c1f7c96528819791422927d7f91a5ea", 0x8f}], 0x4}}, {{&(0x7f0000002000)=@l2={0x1f, 0x7ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfe00, 0x2}, 0x80, &(0x7f0000002280)=[{&(0x7f0000002080)="99e3c1a8495fb48e7ba501d193e97b7e513b09190054c9d8a3117c288f222d3fc6179f7d0db492507e4bdd4b133d6ab3", 0x30}, {&(0x7f00000020c0)="7d395896e840b639c5d88dee78782a345c023bac74c2e919d0d1591a0bb5b31b6f090a3a5626d8ef6dd937e6684bf84fde76c5efa8f2a106ec858596ec5a84c0a78a35d2404542688a9fde33dd2c05d1c71b4cd713369be84ce7b9f2a307c5cccc9421a5143708499708bf441ceae521628f0464e3a7de62a2e892b7ad56210e90fa97c9b4ca2abea9597c592a91c3e3c13a2815d9547ddd398d0d831b9eca7acfbebd533384ca7deb3d7d959c987fdd", 0xb0}, {&(0x7f0000002180)="c9b2225c81595b9ef3631526bed6208edd59e0d0f84d57e86d84a5778df2a5b8aac6986d824c00569ce55b02374b817500b0563a1fceb2acacca2a2a10f1030f6e614fc00159940056465b4aa7ddd65a30f3f3a6fddcffb438f1f8f7521813f421b44c75210b5b0ca3dcf956846d4d4e8f4bbef4bafae39ebd89190d21eb36ecdf2c9e64778416334b990b9f98d101299a3ae4374a2d44d0ae5171be4ca7392737a4b6be5ea950c6a7016648749e9f86c1a31aafa63cb3e6806720a1af9b25a305ef", 0xc2}], 0x3, &(0x7f00000022c0)=[@timestamping={{0x14, 0x1, 0x25, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x58}}], 0x30}}, {{&(0x7f0000002300)=@ieee802154, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002380)="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", 0xfb}, {&(0x7f0000002480)="2f0adc2bbd", 0x5}, {&(0x7f00000024c0)="fc6f3bef5a7c57c35e816480e03852328d83abfc75f41871b6fc8bd89770fcc914472053843b26bee86a08cbf60d09990d57ec3be184f50d872de177b4431a9f7a74faf8de3fd3fbfe832d2ecb00b69c346f40383e1f76d413b4659de4f7c58eb6f50fce399079ee719b4b66309fd8bb65a83e2a10ec34ca545d6028ad46376fa4113d5ea630b6c10d65a03f10a1f2a073abe2c61be25298a9628013a9d46a1f993ff7067f43ccb23445108e78fa91294739d5142a31ae6114433f742107fd8ace5d5988f300b6876cbf839e8211a4a17d981a3a4f7922845ced7cfbdf43db1b3876b108f2c56997b979482e621654580b443c", 0xf3}], 0x3, &(0x7f0000002600)=[@mark={{0x14, 0x1, 0x24, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x100000001}}, @timestamping={{0x14, 0x1, 0x25, 0x10eb}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xc0}}, {{&(0x7f00000026c0)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x1, 0x0, 0x4}}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000002740)="75aa3bea3beb01b93dc0f9d78563924e1f49769bd495cc000b9ed415c5c7be7f6ead2498a482c92933e3371600c66dd653e0fd2ee2b19ea742c81895c500a68d8b05917f97dba9262b5936407537cd9860f0260608dbff4b7f4c7714bb518d88b9a92dc6626f8a5363b4d1ac0f9a4cf8e0873ef0871c69e8c880a8fc73223c86e8cc7296e39f691a72f17d279799baf4b315dd734e7640fe191041c0e884f79c2440d5a8740b27b88635317e4c1fb421b5ec9e43d529bb99ebf3e8056bb5c615cf6db226ae4110eccc48c928dbf17481f3eede847fdd3b4a53fec79d8f8b793dd45ec30d6efdbf6bdf", 0xe9}, {&(0x7f0000002840)="b94632887435267111915da03351a2e0b0cc30796510b6a4635d271d4f5e036c51151e86d1e110d83f0ae13420ff3ab6d86d56ca9da2f7ed3da6bc7efb27867d26d33aa1a37641bc87902c77e5b3f5d68379a0833f6845a15aef0906d948c9e125bef77c1577", 0x66}, {&(0x7f00000028c0)="36fee22f890c85656a2d57b7fdde1b9ef584effccfeac381765e37f4ff50826f8c3e9403824196f8b7d7e1e33868b9d0cf8e12cd9fd2ec0d38af2483c2088587cf81d1fdae231249aa10385c7ccaebcbccc268d81e40d1d44f5e45c706862378eaaccb428a05435790a59ae6c6e8103fa4c74c1b1ff1a6376737ca67c09ceae2c75a767fd987817bd38bbd4792c7c227d7fdec01ee5f150d627e72ae0d5af417559a167a7366675ef5a4c1d602539595228bd6682d2f4d20a7b1e7596f73c2cc2abd0b332cd085b1f6643cdb8959d473a32f340e60e64c0b7d9b4970c75be68347f50ae3b348a8d0811354862145d5478ebd8a913f23aa4b8ef6cc4cc3c427a3152cfad9c9889d4a0ea76c275061eb408def3ba3296092e8f7b84da02e99b2b16bf5908ed1e4b08b3ff5cde51898f40439b671783a98415c658e2ac2e1664b6a6f77d1dae63598edb3c63a2914429f6031f5ad2b34ef9849174371288282d3c6cb1841b54f32fb2261d818eff4cce893033e107f133715dea389862125b6702da98c8fccc31c64c973ed2096d9567f894ce1cc68fc001f1a35c83fd22505153867d616fd43ae489a04fea3b384b6cfff3e0e214babf2b28613175aad754628bf51bb76c950339a03e6bc81540c962103dd178953fd55ac762578582ab90ed9b1aeee8333d6fe76d785ba6fa734d4cae442b2d589ee1a01ef0309888aac935667a52ff0db331fd4777c075bdd02682884ca337b59dc36dab36995794e3728a1f522c2103bdedf39ff3fc256ef981cd6596de9f1b7154e0b83c6e1984327d51f8531b09b256e111cbafde8cd930783c03a7476511aa4c75a57e430dcb2d969cfd55f13253637b95403776efb6e069e21c94bba1411a013b3718199cd183f763c75d2984192c0a92fccb6856cbe8adf8740bcbb5a2f9fb02a9d789871e39e5fdd4e0a1ddf7b8c0e4aca2a6d24bb9d10d0e2fad0af343d148298f84ac6a939a72fb9ac0a50ab51ef49432cadfe20968686cd869dd796bbf76b013bb12341f1f679e85d549662db7ed07f01e2c0eaf17c35b1ae9af07193eb0bd856f7697d0128eb207f582d48ef5578f794c4e08add422879f27b971e0a81407b286361cb50c5355241d667a82961e7d117a57003a80c9c452557d070222aebb69a89331d4b7e9f1e4e78cca4ffbd1f8c971a67ba89fc1cad42bb42db49195daab1ca3591582e26d6666f4f1ba2411269ff51572d14c5aa5dc59bb74e97c9a24cbcc40f2a07b94f8cbedb48e5f5509ef3674e7fe6b0347b752b44107c2b0106955ae1474e24d54af7b78d964064389dde64b3c285253ec00e44b748136a2458620d9b96a73e71d79cfa3c85fe663837e4701139ba76223b33f7bc8963e266cdedccb2cf23d706b33059166a9bb320c1deef5b47fd97707fc5ca2abc9363fa99064741b5e6ef07b49d87c597331fdb850fd7f9abed33d0282a2ea0a3d83ba2dc8b0eee7155d106017a356945e852a4852738a9b86d6272c8126acb2964fdd5d80d4a6fcf2a1181be4a33a88aa66e98017171093067f21663e1d12401bbbe01ad22961fa5144de064c2dd339776fa1d90d9b10ca838fa80b3f109e2c82c517df57bfe79a08f56b5bacc1fd5d7952ed1c9e10e12b4a746dd12bd75af925e3300d465d4ff92a6bcd0b9ac26c7697e8d48bc047d28744ed1e510be6d09a73a07bf8f820e40659beff51320226aee80cdbf28cfd0080a9c465f3a22560e4d25121aa9b87d3e297931b2980dcb394f490d12328372397059035e4670ecb4450a4bddbd3976603fe65d75bf89e3a9a648a1adc4c3746cfc52f6c0e9af6e36f9d448a2737e599da3e595638ad4347f4cf5c784e508390c0f08db58d388180c0000e0bda6c0d85beaaa63db5b2666012d04e3cd55daef0a5ac1a647326de5231a1e9279715869da873290de36e239fe6df11137f841e676a98256765a573e7451a1f83a99b83d12d8f9fd2fd3f5c7718af18d394e0c206f7c489cf2fadf23ef45f9c01a87636a41300026e5fc61364254921c528d6b803cba1ba3d97efc6868a2b397ebf26dceb3bacc7df7bb762dbd244a7c19288ed4666e79619952d8bbdab986496f0be494e033115596ebf9fe9ff34376b10d1007fd25daadad28c351dbb67b4b14a78d64ba87952f4d55fefd82f4a942e9bc22ec38e665241d8404412bbd116dfa0fd25f0a143bc4ce5ce4ecf335600d7f86e48f93581a07d0968291bee32e5b9572b2bb0830e60e8f882c9e83a7b421a19b961c1f59821be3a12551239491fe7cd39d1ba5f149c95be5ba327c573af91889485214c8bb03b8096583ddd6a893eec3072f58cc7b8858f08fc1835da4467d61d162f5803a6bc6423dc0f1d687c76646987cf09a8eca5a3d2e88ae96b391c28bf96d9ba923168ac7cd8538fe1393c975238a255007fc079b5b2fffdf9dd027c4a47a77ebb44d31e9c558f6e976c77195270774f6c42f1b6571ad9370e75713511af7488879ef685461a991fd27444a16e11099a3e1aa66594e8bba5944c3081825b6d909587a3f0bc307a5bdfc69d26bcb6352d4d55a383ea76e30ab8ad096c9e0db6aa65b9afef1b3f23a19477ab7370423b80c8acd9fdd61bce008f0418e18e5eb2c62334555ff74e0e38df392dedb12f65b06b6f8da6c84cff86c363fc340470a18f8e80ab30b53f12c519fdc6d96e3e6f6f95d1e8e8d3de4cfd29e2d79f7fc133f61a7d35be1099cc1843e61ed3d392c4da0e415c6eda83feef5b9551c4036a3d6b241d6fcc72251a2cc292d021af4d4f4ce39014d6d00ccf3290f4a8c0b5c9a34a7a77d565ed9d081a1d7d769e001b75270e9e32026b136e2e777b0167eb59784bd92b72afb8961f38c3002df76bc5c2749ae5eecca8ba4fd23197ad1b5961ecab546ba2863c2b72d6ef12fb575e7d870a6865036b539802cf0391691604031d1cc366eac10fa8128b6f5f9dc7a5dc10e7bfcf286f7ef52e67d8ff988c73e014892b937f5632e3d725b5304e81c7da073c191809b53fdf6d58dd0dc4e00c74bdcc02bd47ddfaeaf8c0ad9304e96a0521f53bcb66797f746268c5f1e635125763e10012db5101efcc7fe2e33a02bb20544256f375c887f8c4475a5dffc835a5986d0bbc7b6ec3eccd37ff43629b95bdb94207b9dbbb7fa9fa8dcc641b74b6c089cafd1f20ab2f0dea39bbdfd0e933ab566af30006ee51f5d2d25e854393a43f7378cdbaf255ee6a20c6aaeddf7aefaa6321387ecf4598437f8a61ef28dd8e457054b5f3925b950c3a210b7e3eff53fbb6ed2b14e568393c196ca3e19f35af05ec324f3b73afb0e2f69a3b8ababb968b52796fb51d41ebe8df1100d094af671a649876b6546e8a080500ec2da0f6ad8d8a52a3c209144eee997b71f5b1d0dd257a9cb3cd08c5f5ba2b4d1f6a24819631a20b11a6313244ede5b17da70fa2f710af97aeebaa71a8a31606e0716566774de83c8dda10a17cdfe04b83fbc4c8517de68776bc536d069631a370884ba0f7ab5603dc896343abb37380abeb87771c373d37c2a2fa80ea826f148b933d79a316202f9ce5f7f4896c0b141c936f50aa779160e838ce17882e1e26b87d592736790971ba2a19dce9dd597c6bfcb1d2d52d15874e984b416ab260421d4200d82add8253f4caca6268643ecb25b43ee4b8f7362165008ac305314636ea2a7f9f51142cead0814deeb31f117e153ce296051ed72b94d264d5d7fb1192212ed7f065299eff8e6572fd18c9ea46a88938fa588a38debe5658353fb1c5888e6d5d104e543fd301c7286c6df8793ede78803884b35e6561fc7740da576955111b7ea58f18086f56c74b1976d70aff0678fdd9569bd713c00d3043954405a57bd27d9c9258aa0f9f8071933c73ff1ea135685825b56768b124575e2ea4841123a0d4e18c3e3c78f3392c69f55cfb350661c84fc117073032783709d445ebedf746962a710eb9f8645df146104c657884b8459edcdee6152e2598edb9a71548cfde8847908e6f1d411a53caeb65303ca628b6c7a8b4988f731575e960529dfaab069d62900f6239316bfeecc8d813a4bc2dce23dec49cfa95d2d73c58d3e5bc6be4a7c24078400faa6417fd19578583714a0c5635e58e44f310c117f952eaf5b4d7889cf61f6763f3a3be8161592e796a2da2fc263a967f1e8566e95f6492b4b9893426c3d73cbe2a8f4e5329a9786a35a5bad5cff3a07f15bb35d5217bd7e71ca77f9b66d0ee7ae5d9117f323ebf779b3da35ab20cf56dcca856674d67b10e78d5b6fe99c7b0891ee256ac3c1465f1c82353dc023bc5db549daac50d1b53eba66bd84f9db943951a4329a3d9c4816fd9cc1ef7a8678620b4b7baf7ec51ffd5f0c0693d3a32d2b29e816944913d27b1344745948eddc631c03b9b3e4d4a79cbdfd39269ddc8d435757b09ff556b66ba8e1a5747da31704a71ff83770ad6fecc12155504ace8364724bfafc119a25041a91dc77cff55ff8ea7e5a582af899992c582122733c849731fbd73297c381e00a9e3cc41843c30dc647e66b3b2b79008a3e9ccf410531577006c6429f860d2a7e19c2f49459b02d1808f55165e3b3b99990da6200f6ee33ee498a85e9f0bc270705591d815afbfacc13e0e5130f7b74dd4e85df1bee1eff724f514b45fc6a69f87091e4bb1e82d228586232103a569870d36c8d2e40a9b2ca2afb7119c180a5a64a4453eeb64cd13924a96cef7df7a0d325758b150426725b1264af77bdb60910b59288ee2919b93d6f5ef97f9154e4b621938d1c2bb46b97aeca5909b488f703d98236370d50906adac74de3531595e011434c8568439d4986345a3c3605f837457a421d382fd647ccd9d69682efb10102165580b5e633098fba090e7efc64fcb8c59cadbdc57bc8885a6e37c1a22c90747565c50e6657248635b3f9bc66c4c36621d9bb8ad5dbb49e798bd0dde2d3e8c896e6fb185aaad35a88c7e6dd3cebce39563ec158db3d64fa5a0a1a189f1775808e297e78d03a3407fbf7faa6f61216b77e4742c4560fe7c9bde6418e27b5028bb3fd212ee9647a1c3e95cca7c1faf3cc81c98c69489b0d7e874d89d640f2701d44fac0fc9efa2fca3c9c90db747154ae5a20ace45b033ce178d986f2ce9e976c257c256a32aba863d921bac6f17066eb5e53b0d8896ab5725a1b2abff2435dc05e7c11cc46a1359d7505ea2c691231a101bed3fdcb4ee8c536b2205b3364053ed94de54b6359bf5e6023e969fe02f6765b5e425c190337c3439fdeb51ab96236de62793a011cd278284fc5ed2c4a0d36e9f208dc130d761dbda56168a928e619b76ba73fef4727ae9a8b26f5e2fc64c44065db5a1044292eb2b3c080776844f05bc97b45ef0d393c2df2cd9cf8a9b6b144a76c428696811b73372374a68150b387bf4d731bc716ad0c5d6c4fb8a6cfc47f4757d25b026d706da47880615a8acd2f81c07b9c36e49803713d46fe48f8c93ac654bcf76a0d0fb04fac0c4f52c0d98e750fcae3ce538d2dbdd6f05bc60f2850e19aa73c5a040a95e95c115e6244d3798c935a8a5494b1e474dcab65998da1134c335e9e80c5df096483e1cc3d38a62c16c3fa7027604d74ad70d665441a97c6c877ff04a1c81d57e0b53e4eb4248903788af7c8b1b1011c4d5366ac1e93e56c1670c9cb6bf79ac60ca3da830c5c51826e5b4b7a5c94aa77fadb6661e16e605bd4a3d61636130185310e15a7e3ff7a1ac11bc28e19d4e437c131bce57321098c098640c1b79594aa64b36fc8891e2b160ab6d399aa1db7ce6cf389", 0x1000}, {&(0x7f00000038c0)="718c4249224fd0658f39dc3b4f22a16f65aa7a5fb17c2f5cf5375482b46c2f93e00cf0d99bb900303fa21e89dc5d73c887f2b83f25f62c720807abf5a31e660a3e21d03a66dacb9811746e4cfea65d52c226720f840cb67642a062911d0b512ec59d06f6dcf597d31cfe6d4b1d9ed5b6d29cd448d158cd4b017b993ff85221ec93c7d8fa1efdad08d827fba03e75fcb04013eb32a9abac04a23f12a6a6aeb4a082ddb35014617e230c1c470c46a90adef1617ee3b76a01086c9fb1380cedb5ad5e0f556c279a6221ca5c97550fcb661f47ae4120072fd59474246e9a0c189e595bd95d1e35c5c5", 0xe7}, {&(0x7f00000039c0)="15764c7647a9006c0544875d9430bee37052dfbad5bf071e1fe7c9e10fc7da5c30d59db11f839edd33823969767eff1b60d21d4b8766b0cb86d46ff6a65d0fa9f8d5f91db120efaa8736c9a9f33c5d3170ba828614240d2e5ffbc5bc7847e53f2a1f9c246f1991fe6e44562ef079a46ee0be05a57522d1097d446a877a26e4e719e3f2", 0x83}, {&(0x7f0000003a80)="5e465e829212da2fd68d3cb44965969ff199f190403b65ddfb5128a58f4a13", 0x1f}], 0x6, &(0x7f0000003b40)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x100000001}}], 0x30}}, {{&(0x7f0000003b80)=@ieee802154={0x24, @long={0x3, 0xfffd}}, 0x80, &(0x7f0000004d00)=[{&(0x7f0000003c00)="69f62f0780f9f271df37abf23d95dc813730e012d12392054a265bda74d24fdc4efab09678cc6eba53e5fee510264124a9f8f2ec54d9ace8c13c275cd36454e7e676c6f964d77c236a0a2d1617dcce10f3542ef7ca874ad6eb172642757a6b612675b93fd43896367e1f80df73800a996f7d77033029767a014b028071e6486289ca8a95d0dab4bb6d3fbaacf931c7f7813e87e7c2e4e0830ca53f3b17e5329470d930165233b358060ce1a6d4489193269380b281aa30e1a614dbcd4c682ec199e4705e3969ce50220b762b4e20fa3b93431ad2f5161911bd2d1d", 0xdb}, {&(0x7f0000003d00)="16876cad6ee4a647cbc3f654511c4b443e7da88562aea4e2fd925a56474b7330339f257af257fd1db82f5637b82621054d03733c122e75cb169047960a47c78666354f82325cab101be52637b923b26ef14d8957d3d891180be4b7042611d142d0ecd1ae9a31fefa805b9d62bf05102479b5650982e340711e262d49fb8e95fa943911fcc1cea80293388b99753698e1a205c4474016d72a48619c9e672f219388396e04f19b72cb368e185aa6dbdd901c0e2865e20dab47272b02163f27b23db9258bb1fc6b5715c49a59cbac5e5afeaf13a337b48d4627d1657789aabeda5681fa0aa5939b1253c77b680cc4a65321d82467f7f319560f62eb0143fa21b284e9a32ed0a14b42b099a026e13b4cf1a59ed200b493ae0fc5e4f03210e5508b909a6c6d2129d18f62e8a2077c2851c8b89bba1a4c5fd970e01030c57595ff84a3975fdea213a06a29157c26e688a33858c6a19a2c7e848550a066f821b1c2fb554cdd9fc48c69d67c150f69dc0647c064b1d49b884926cc21ff894e267cce761effe2ac951003dd32e3fd5dd93c3923727ccc6af20e92f13a08de5ee673e908e8bef00074ddb9e345e59c479b84775562b8313161f045751fb3f7cb40b77a4031770284ee5f47e5276b92352f2d5704814dad79baa8c7f2a2ebb0b27f0e22d8c55fd5895d7788c6dd5e4f85f7681e3fe4eff17882a9c3c489cdc9c76a8d368d9c8461eff18cc4f30bcad02bbcf0f4527a7c6be2b6b763302233a545651c5231243a0eab31cae5e2c31deafc14b6ba981c24c1ffedd4ab7bbf438eb6e24974b9f779359e8aaa99423e31333b3ca1e41f7edf2aa2f87508b7833bd2aa4478337b4ee0334f081124cb511496bb4a3efd0739d2f5620273304cd40f6f66b0287a78f304d64f8ee04644855155c0074c9dd4c321721ebfc386cff4c32a94672103c08aa7cb4e9c4fbaa30c202f15170a2658fa364747d34d6ed2ee2a9ca06dad55ba254f89dfcc92ee40f57b50598b45c79eb9e7dc0c07d29fb8034d99dc31bec25298ba5faa3a8851ca86da764928b6a6047acb231dca744eb30e3ffaeeed268ab1c71e5ef5691d1c8efa18e6236e466bc6aaaaacc7d1ff370c1b37cde76be3a2310b9f081ddf210f78f4bd8c71f2c47751e138dd465fbe110cb3289574a7d2901019172e679389e7fe433bac9b7b899d95921be02d92a301a8a52a3276365d546909210efa4344b7b8502361b4e5906ad81a21e1e7e3b720eaaf4147a7a19ac98da1a63f178cd30393347616eb8f01f03213ad1e22ae67512754b516cb5606d1416c220015325f2dafe470ea111d0b595c862c41f8cd20d40a43731951c7da057ba5d7d50cd43d24ebe7fe9379a7b56dba6bfaeb1228f35f103f7eca77d65abbe59e9c94721d0bafd19b01ab72186ae235ce642452b9cd798bd264385dbd12bf8fc26bcb98fa83589498aa879672657cec6af950bfe6af933b42f2e326dbe8879d3dad2f9a2618e45f78ae6cfc14c2e7247fb819c2c6a613b164a46f0c7f149d3cb1b7c13bbde884ef6a03ae8dddc51275000b8fb010564d70cc0c031728b2173a19f40ad2b957970d727556ef662ab0cee67403c4b2a775daecf569c7d138c28e1228cc12b2c899e3089a3d5b5d5b32e6b163a62dec374fc3d7c32df93503bbe7ab494ca9cd47aa905888f0536c3b25502096c5f98b3a16b1eab71a2e8a5087a83cba7b4a09f2ec251eda2e638fc5e13f4d9b3ad77f0589f8fa566544a2212d61bf424979f26f37e561943fd1c3742e7e0711bb5335a3daa394c69512931c2a6cdc9ab3c1a1737086ac027a5067e36ab9c50ab39ee6695547be354af543c71fa23bf3d91c52d5ef89b6934b6f6ba28741841ab9376dc5d0e7ac118a9ebbd71480dfdf62544a1770998bdaee97c226191808d4d48cb00b9b922f65f19bb46777d9935f00f9ce2de54888b230715e9478c1e5c5bbdbd1f163b2443f5dc1d2095bbb6eee91e3e5c120699879665b8b4889a4c6f06e2cd0c3d54c0c9d0fe52eee6c4cfee0ca39b6d43692fe835ea883d2994e038c76de4ccff050bb8bff26b0c0a42f712f91093e42f367d44b6c00bff429a1ca1da15f022adc9c676581cffe585283e58db2c7ab8298be6e1141f4469253410ede65f8e144968c9a785f96d795b59aa10826edb26252bf137fd7b31eed79b1981e9380e2767db3fac553422a6d5f10919b1688db0a553c4552aff2aab0828b9c27050110b1e62f08810a22c9268825dd188dd7421c976ce85784a3089e0ce3e404311c21c4a343fec438abaa82b5db83d36dce0f089f343cb6fb63003054e1d2e31ee7a96268283b6cd80b59e531b66e1460e2f4b550db61b13c7183ba2ddb7488b15889f873840e0785e67028853a5b882c2c1454b34050bb2becab40646c578d91db900444039f029a875a9a0cb3420e5f3035e3dc62c6117a6550618f8aa475f344b1b31de05d3e123d3882833cc9962f53279b0ee537a5c0df2a313f04e78bbb9ffffa456f819b0a76f8027aff8a5b87323f8bd4ef158bcbccd1fde5d6316701b128c9133d772ead6203a596b56c14699d72ce9c9c8d2829e2070cacadabcc72958d65025092ab965113d71141cee5a0f871479747c34752ce96f7a49036996cc27a1dc02c327e6a18c0330be97d97c5d38f914b4f4578149f8f143b7be537715338654f5e6987ab3f2b20d290d5ac0070bc98eb1fbb87db43aee126b5d1284ccea8c49cfdedeb4ff849983a0cbbd7dcfc6ff992fe5ffc9f480c8a408d0f2f14dc37b0e7e2a64156df54231af7cc58876008754dcdb6d073f91bd35bf279fee93021999620a223d24c6fac1cfd793658d806d21cb559c39a9e85c2264a2d38c30017fde81b83468aefcd977e3de5b1c57173358d44f3e0448e4991507e8c013ad30130db8f7a14b27c8c762c5705c3713ff41b31e888e32f6d572c4660d30d736bc74f6b03020ef8283b5a90923b5e931d1825247161d4a0dce46619202033dd813c07d431c023de2a634b9146985d861e24cdddd4ab0a31880639e5a4071018a74a0d45451598bb3f0dee25cc16fcbf4d5e8da295b0197956efaeac6eb7dbae1022a2c8f3a0c5a9a56a370604ce5eff8fea3f318454718f5896567b1f10edf3fdc0123d90c397a849cac265c4607dfe24e4d7e42499a2a5570fa805ecdaea3f30c2719e883a8fdbcdde4c8aca06dae0dee57274f7d2df9456079c8891852a8ee2d179562bbddfa90bc60bfd81d35964d755cb3e38d6ae33352f3103d6cb768d5576b8392d468e689f285645928ceb316fb7de92a1a0f47a03dd1b01d1cdf80722f212fc8e279b2067efda6910f702619b06d634a2a8c3ed235a7a5f771ef6fd92185e95a60d6c4b98df5f66a37ba7661d0c10f7e9bd8cf0b0284821c2ad990faee8380a5402596c342d9cef51b870ad8b76e6a9d26e3f7ac24cb99bd09888914cb361dd3540466b8d2e01f07a5457d31f58b9ea8b3bf3933f9c0fc73d9d3a2079acaa6c6302bf89508ca13ff8b6d6c0838f0c618209d737385e063d4bfcd2d0368a34354eab45e1d178e138da99db5bfcc9ad91591016d38aae05025bf253a889a2826f62e321d7deee41a943696226fddc6378b6285d27b69507980cb0e8359c883cade47a2d8d87594929cf2e52d796cbc385effdba8784728448be90751b53094dfe35c47241e9affa197a0726d10df40fc75551c139a62a15259648ba027999eff1b7e833b2bbbad8b74529e36871c8a5a3888752fa942a2fddf2a5b67b674de8a071fe6f087c2655a027851fd904ca1920933832c6c46173fdc25f2cdb75dae1e9abe16667b61ddc4cd62f2ca6aa72d7d23f09e0234ff3472110ae32d90f272cebabaf191ef78b2e555f9b245945468a7f176e34478f8972454609cf7d0b90d452771ac416442684d25347bc202ec42ccae568259bd17f2450f0b547eb7e9f91a1321eb9bb3dc1b50ad1baf1e293c9d307c4d3727a6e346960b9305d60e70f19f43b4dd0a7f278fbccf989af0d1a736d6046871f849c305e3604ba6e839907694cc07ed98765d1fc4e4f98715301c67e44d11459c94885388c9fa49508a2874b3a8534fbcc00b12797f8efad925844d727c8651b69e1edbeae83bcb638de2901d3e916f0f123eb6fc169ded7253246e08a40667872e69828266d1f8d42cc16c6a7472e599ab69eca83f5c5c1c8e24b0f83926ecf8ac1307c546acd2dbebf08077de0ab547902ae5aeb9db7144fe6201e16a8379fca4640adf003f9aad2427d51de8271da68752c79c4feb7b75af3f139a7c0b6958762fec2546bdcd908d38fa2610b2cd3b2c9d26f9fa547886643378a1ddc26b2f9574c89f3a70cdb6b8f3e35370a835dc206107462178ff1e0f0f3719bfe13850806f9b546c8cb5ae6974fa8bc0c8c69f0fc7e6938cfdf166b4c4799c25cd65163356bd45841a240fbf68436e027f2ec38b78a2f7bf501cb93e406ff0163e25cb162084a3348e025491b94f1bca1f5f2a3c22a168eddd6934d03a2aff1d0a49d7464a7332d52dffa2a2f7f45164fb3a76121e1b2a22d93f19b37dbdd1cf90968ffc4cbc460ccb0c83a62d13dc76bc5218b449ae8c17d4d359e8765ab900532a6e9a3318b4c9053327c9dcec1901417401cf09be0d47622d2ae9d5c9ee417b4379ecae82a3b232b922c35d4dbe589271e4ba43f4b98849783837baa62e16beb5022a610f47f4dd721988d702335cdf644a98485a2e88ecc6620b119bd4da53ecbec4c7855ba6be70dfd70c546e8b6c229ca2f8acb098d84eb89aac4198e2432273a7021cf59ee16cb940adee8cbe116918f25ea75a6133384d3c4ca8bfab39a6c5a6c20ebe9ac5262b2a2fdfb3b4f33894f2a5dd543bdf7ed40bd88f53844c1798fd320611a484c592c546cef6f6fa92b034661f683c5c433fbf1adc4162ba97cf0e75a6d5247c39b942282166250f5d669b1eb63bc507943207e39f9052d872e027802496b7d348514c8893895a6f523c9d512f3f52a677965c27e5901f68c8926b518c14df403649ec56404e513704eed3d946c2001e4f4757845586e5459b1df7c2093b566b156428b8328428dc06552d100fb9137612707b9ac87cb6c6dc08ae93176a5e2399ea99e03f83fbe80a64019c53c5472234201eeaa6c079f4b498cc9f1df37e5668dbf194d2624baf7e5f00cdfc074a1777c0fcc95fbc4f1930fe8dbaedd1db3ee9e1411fa01957e105d736ae08303789e3352a61499f94ed53c8f48e0a39e0f18dd858f664402c4adb2760d3c5830fa5eb7a673ee2e4b45c10d616f1bb9382506bf2980278dec0817e1347a16d663541256809a22847945aca73872fc1fab9d75c35eb570f69afb202bf02d8f902641108188b7777a0939446a8770094046d42492a8e50794a8b59deeab0768bbefe0e59f9c7aa380feef7b7012b902f539d0c91f5646b50cc33375e4f67a64e211029b4fdea736132d7433aa08845d4d8ce56adec5d67a3c9ce3ac89b125ca06ecc8b5e83c053ce70ff3f61f702943016080054f78d5ca8ff62ebd97edcc148a63cf69e9096a7c2f91100a1a8c01015f0e4bc20f0a80efcac9ba353d936e7e976ce9190f502dcf47a7d449fda9ebc09befea869ba317ecfd4fbc789f6c1914e93123faa28849a9f46835ece82297dc964646c5f3c2845bb90f62d750334be5c1cd6baada84f40b22408775724e5566ff82b6b6c5f97e965dd4adcefcd196473fdca38bb580e6aaa93a5b75afff108eaad9729b3dd6f5a6e7eab36548b0e8678c050b07", 0x1000}], 0x2, &(0x7f0000004d40)=[@mark={{0x14, 0x1, 0x24, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0xcd7}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x48}}], 0x9, 0x8000)
readv(r4, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

16:28:28 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:28:28 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000001c0)="04000000646f7366d83c85a7f6503e9b4140002000f8010ccbc90f0b8fca2a68c31781f573bc9fc6da80926e8e4ec02b1dca57704da96d029fe4380124bcc2ff12df47bc4dec25371fac9e65becf638456cfd3211473e6b8c6601ebff17e2e14e1", 0x61}, {0x0, 0x0, 0x27ff}], 0x402, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = socket$inet6(0xa, 0x80000, 0x47ff)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'batadv_slave_0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x6, 0xfffffff9, 0xdbe, 0x2, 0xfffffffb, 0x7, 0x9, 0x101}})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r3, r2, 0x0, 0x10001)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x40, 0xc0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:28:28 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x0, 0x8}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:28:28 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x0, 0x4}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:28:28 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 3055.681610] FAT-fs (loop7): bogus number of reserved sectors
[ 3055.682195] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 3055.727084] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:28:29 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xfffffffb)

16:28:29 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x500000000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 3055.874069] loop2: detected capacity change from 0 to 40
16:28:29 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
fstat(r0, &(0x7f0000000040))
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

16:28:29 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x0, 0x5}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 3055.921559] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:28:29 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x600000000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:28:29 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000001e00000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="2b003300d0000000ffffffffffff0802110000005050505050500000000425030000007606000000000000"], 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xff, 0x75}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "22d13bf52fbe3424347e038fde"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x60000c0}, 0x8800)
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

[ 3056.040009] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:28:29 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:28:29 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xfffffffe)

[ 3056.139591] loop3: detected capacity change from 0 to 39
[ 3056.141947] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value
16:28:29 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x700000000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 3056.230096] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting
[ 3056.235717] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 3056.237394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3056.237925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3056.283519] loop2: detected capacity change from 0 to 40
16:28:42 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x800000000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:28:42 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x0, 0x6}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:28:42 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x0, 0xf}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:28:42 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:28:42 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:28:42 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
mknodat$null(r0, &(0x7f0000000040)='./file1\x00', 0xc000, 0x103)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = dup2(r0, r0)
mount_setattr(r0, &(0x7f0000000480)='./file2\x00', 0x8100, &(0x7f00000004c0)={0x4, 0xc, 0x80000, {r1}}, 0x20)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = syz_io_uring_setup(0x4693, &(0x7f0000000340)={0x0, 0x9bc3, 0xd, 0x1, 0x3a4, 0x0, r2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400))
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000580)=ANY=[@ANYBLOB="ab000000010000001800000043ba34f21624edab50af0bb338b22185893563de0af3c2fd0817a5891445b07eebda3cc0229232f3325302b80faf473dbb8d841fd84e46d0261000ac364a733702efb5f2b63fc91d6cafb14e38aab863c8cf8591fc1538e9dc3c238e78124a1fd5f022676f8d7589b7453a88545159900beeb28eb782ded012bdc9f4ea4f7db7a3e7cd38827fc22eef193b87babd89ed60337b6bffbe6c619117b3649ac1a17b31", @ANYRES32=r3, @ANYBLOB="fdffffff010000002e2f66696c653100"])
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r4, r2, 0x0, 0x10001)
syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x4, 0x1, &(0x7f0000000280)=[{&(0x7f0000000240)="d7617b6611c95ed51fdeb7cbce13729a7b1732e5842fbaa0fbcdb11774e6182890427b2b", 0x24, 0x6}], 0x1000000, &(0x7f00000002c0)={[{@check_relaxed}, {@sbsector={'sbsector', 0x3d, 0x3}}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '@!-%!^['}}]})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r5, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000540)={'geneve1\x00', &(0x7f0000000500)=@ethtool_ringparam={0x11, 0x602, 0x6f, 0x8000, 0x58d, 0x6, 0x0, 0x4, 0xfffff1b0}})
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000680)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, &(0x7f00000000c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x191)

16:28:42 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)
close(r0)

16:28:42 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x1000000000000)

[ 3068.959833] FAT-fs (loop7): bogus number of reserved sectors
[ 3068.960339] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 3068.997848] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 3069.020427] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 3069.041766] loop3: detected capacity change from 0 to 40
[ 3069.045709] loop2: detected capacity change from 0 to 40
16:28:42 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x8000000000000)

16:28:42 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x900000000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:28:42 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x0, 0x7}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:28:42 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 3069.176614] syz-executor.3: attempt to access beyond end of device
[ 3069.176614] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3069.177684] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:28:42 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
r1 = openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x400000, 0x2)
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000540)=@get={0x1, &(0x7f0000000440)=""/248, 0x9})
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x9)
r3 = dup3(r2, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000003c0))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100))
dup2(r2, r0)

[ 3069.227986] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:28:42 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x20000000000000)

[ 3069.279473] loop2: detected capacity change from 0 to 40
16:28:42 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x0, 0x67}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:28:42 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xa00000000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 3069.418792] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:28:54 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x0, 0xf0}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:28:54 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x0, 0x8}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:28:54 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:28:55 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
socketpair(0x2c, 0x80000, 0x4, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setownex(r1, 0xf, &(0x7f0000000080)={0x2})
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

16:28:55 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000442002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

16:28:55 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:28:55 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x80ffff00000000)

[ 3081.810948] loop7: detected capacity change from 0 to 40
[ 3081.814467] loop3: detected capacity change from 0 to 40
[ 3081.819426] loop2: detected capacity change from 0 to 40
16:28:55 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xb00000000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 3081.823679] FAT-fs (loop7): bogus number of reserved sectors
[ 3081.824089] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 3081.829300] FAT-fs (loop3): bogus number of directory entries (66)
[ 3081.829873] FAT-fs (loop3): Can't find a valid FAT filesystem
16:28:55 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x0, 0x9}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 3081.879961] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:28:55 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xc0000000000000)

16:28:55 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(0x0, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 3082.002706] loop2: detected capacity change from 0 to 40
16:28:55 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stack\x00')
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(0x0, 0x0, 0xe, r1, 0x8)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x2)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = signalfd(r0, &(0x7f0000000100), 0x8)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r6=>0x0})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000000000000", @ANYRES32=<r7=>r2, @ANYBLOB="01000000000000002e2f66696c6530009df5a79ad279d9017220da5ba1a124272019772866e249dc2ed2c4b82faefed283339e27c6cc2e5634095cdf7bf3f9e0880985aaa365519df255c8c6ba4cd7dbe0fc128352da64da38a8950523e015a6bf6628f3d00579496df4b81ad5ad01ff321a28c30bbba83fac3cd8933fb7af81"])
getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000001c0), &(0x7f00000002c0)=0x4)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000180)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x10)
bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r6, 0x1, 0x6, @broadcast}, 0x10)

16:28:55 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x1000000000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 3082.108108] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 3082.420861] loop3: detected capacity change from 0 to 40
[ 3082.422474] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value
16:29:11 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0xf0ffffffffffff)

16:29:11 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(0x0, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 3098.121115] loop2: detected capacity change from 0 to 40
[ 3098.146499] loop3: detected capacity change from 0 to 40
[ 3098.153094] loop7: detected capacity change from 0 to 40
16:29:11 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:29:11 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x0, 0x21e}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:29:11 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x1800000000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:29:11 executing program 6:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter6\x00')
readv(r1, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

16:29:11 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x581082, 0x0)
open$dir(&(0x7f0000000240)='\x00', 0x800, 0x80)
openat(r2, &(0x7f0000000200)='./file0\x00', 0x80140, 0x17)
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', &(0x7f0000000180)='\x00', 0x1, 0x3)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r3, r1, 0x0, 0x10001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r4, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000280)={0x1, 0x9f8, 0x4, 0x9, 0x13, "947b1ce1ace50e93900c622b589303e07f913c"})

16:29:11 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x0, 0xf}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

[ 3098.174122] FAT-fs (loop7): bogus number of reserved sectors
[ 3098.174603] FAT-fs (loop7): Can't find a valid FAT filesystem
16:29:11 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x100000000000000)

[ 3098.198822] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 3098.214295] syz-executor.3: attempt to access beyond end of device
[ 3098.214295] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3098.215337] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:29:11 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x2400000000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:29:11 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000040)={{0x1, 0x20}, 'port0\x00', 0x50, 0x20001, 0x7e, 0x9, 0x0, 0x8, 0x2, 0x0, 0x4, 0x2})
readv(r2, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)

16:29:11 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x0, 0xf0}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:29:11 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(0x0, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 3098.374068] loop2: detected capacity change from 0 to 40
16:29:11 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x200000000000000)

[ 3098.389632] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 3098.418886] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:29:11 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x140)

16:29:11 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101000, 0x2)
openat(r3, &(0x7f0000000200)='./file1\x00', 0xa000, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [], {}, [{0x8, 0xf, 0xee01}, {0x8, 0x5, r4}, {0x8, 0x5, 0xffffffffffffffff}], {}, {0x20, 0x2}}, 0x3c, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r7=>0x0})
mknodat$null(r0, &(0x7f00000003c0)='./file2\x00', 0x8, 0x103)
bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000180)={'sit0\x00', r7, 0x2f, 0x8c, 0x1, 0x4e12, 0x4, @mcast1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x8, 0x10, 0x2, 0x8}})

[ 3098.554832] loop2: detected capacity change from 0 to 40
[ 3098.573813] loop3: detected capacity change from 0 to 40
16:29:11 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x3f00000000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

[ 3098.764863] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 3098.775708] syz-executor.3: attempt to access beyond end of device
[ 3098.775708] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3098.777355] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:29:25 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x0, 0x20d}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:29:25 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x300000000000000)

16:29:25 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0x10001)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendfile(r2, r3, 0x0, 0x9)

16:29:25 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:29:25 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x0, 0x600}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:29:25 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0x10001)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)

16:29:25 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='attr/keycreate\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/160, 0xa0}, {&(0x7f0000000240)=""/40, 0x28}], 0x5, 0xc5, 0x4)
r2 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
r4 = socket$packet(0x11, 0x2, 0x300)
dup2(r3, r4)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x0)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0x8)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0x80000012})

16:29:25 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 3112.099064] loop3: detected capacity change from 0 to 40
[ 3112.102135] loop2: detected capacity change from 0 to 40
[ 3112.112042] loop7: detected capacity change from 0 to 40
[ 3112.128913] FAT-fs (loop7): bogus number of reserved sectors
[ 3112.129809] FAT-fs (loop7): Can't find a valid FAT filesystem
16:29:25 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x400000000000000)

[ 3112.151585] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 3112.204272] syz-executor.3: attempt to access beyond end of device
[ 3112.204272] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3112.205838] Buffer I/O error on dev loop3, logical block 10, lost async page write
16:29:25 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x4300000000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:29:25 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x140)

[ 3112.309762] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
16:29:25 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x8000000000000000, 0x0, 0x0, 0xae, &(0x7f0000000100))

16:29:25 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00')
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/179, 0xb3}], 0x1)
r1 = socket$inet(0x2, 0xa, 0x9573)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000019c0)=ANY=[@ANYBLOB="241000000d365e3584de8b8506bde46eed4f34655c0e4dea8095a4d49c823bb79005a9192a5d11b8400fddee19bab21ec527db05daf7d962a191e1bf43a00bec94ebcd3a1cc5e6e34576424614edaf13a0b96b950a50bea35fd9fdb2825bef0246fbb254eb1cbff34a095c458fae2239d07764673ef7929a1495b8aa05b9e26cad6f0112416f41b39fa30f4c147b00c0948423bcaec8e79261a9d0108b7348755e49bed0e39af3ba477f7ed8915c372fd38121ea1e421d2f2229fb451aa5a86b0490a4c68bfd13776c4e94c939", @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf25670000000c009900ffffffff4e0000000410c500c55537cbee9c5456ec60209746a7bd3c6dcb0a836a8f0b6b6678161a07a9d1f10c598afadbc7554f5e6671906dd813e4a522ecbe7363d9ca8a5e02922a10bbe865cf39ebe8ae656e75aa359e3577a042860be4c6e0b12d3610cf794dfa68a6e84e940c076c005e1bf4ce5f8aac01d0510daf19d6389f3bd25ca52151309d8a932e520a0796352ce4babc799f5f0ce6f8250310d7f9656519359324769b0751394cc4c09dbdfd67277a5fbe14fbe33cd674466669c824a823a5228c7486e8ae9d97425dc3fae9d1ee5a6b088221d52813d2351ea8889fa04d1e9383bcd83a114d3537b4545030bb42a9da0dcefd91df63851e41c4c908366dbd22ab207328367e696eaba234680295f7e3b6d9508d807425fa1169e8d8ada930bb633d7de1dfeed726b8095cfe9e615f9be936919a37e5e049bb693b77a59847151b9f5d85e5e7986f48294e2170ce26a3859abc447be1d58283ffb6f9d5213df71688a4540ed6a535981dee81bd3f5a2477af5ae699146de9d75a5b4bddd857ee499e5cad5b0c78fc8595e440c7d0f10bda3cd16ac0fc0240ae44fe0dbf2fc008182284e2da91e74dbf7c97a515e6abe71835d67428b13cc38f5ff96db0a7c5228c98f35fca809d53e9fd375ec5ba963df334ab737ec292ecfb11b36912f9080cf6dfc6e2e0fb8475645ffeaaddc76dcf1737b00e66bbf9cec8b30d6dae7e6eee09eccf3383bfa682c625ef8c1578bf3548d6ffd4cee667655d86b4701ea2ac8b39d5fbf9c777f142d5ac70660313f9c8a3d6d67002b9608dce36acfed30cf653db63acd931318d5840b72a1b22d9cf65b8ea176eab19c14dc9a3bd5fd259e97c7782b2436240360d4d729b0b4fc2815d8e5c3061907ba1b0b903adf9ed23b8713f7f592bd7a66ef7e4b221b09b3c3ec97fb7777092002f65baf9f9be0a512ef49e044d8d5226cb3c2c96f3637b35daf5a74d9a2524619dcc149f2dc5dc26b62534139e7d5d774648cbfc605889a47625ad389ac3b0d830b72a229c73302160b88f24d23606ac159df39246df4eccb582ac55ebacdb06fe944d5ec563c4135a9245b33f0148b27fba6c86b1759528de2c0304d00b0af8060ceb8e4a98afbb9a4ba9cfbeae716528c5285770865e790db50e5baa240d9aac10eb5d4c11b422a67c857b10e7bd37f015e11f6667407de70422d8f48b3cb650cf1d09c06089dffb7b862c124dec15886ceffe0cbff4c93da056c71033b8883b4876364a48b5807ee59a0c3e0f4f68a259b915014b5b4dbea1a7d11a9010b8f029611f2ac749e2525a68dc3d5c572b70778e091b698c31f5b48f5a49c86e28a84f3be290c885b82df07e4ca2a9fbca9635e90221eb04374a2dd48ff93892ca601da326473e30e093c0c30ae6f5d029d4b54d0f626343222d3af4618e923209edc3e1f19f060e0fd5cda53038c63dc354bd11e404db4970fa72c71c2768b385760f1965f3611d5b4b6ac5f6649a8ca84bef0923ed0f5346f88e8055423c70045124d6dbc1837f67860494d43d8b1f92101170e90829d821f1beb4368a77a3b705b9c9ef8d15e6ae6cf0f0f10c774ae23816f40d96d5d8481544518500e133547ae5f3a46e2a61a155777552c1d8aaaacb10f4e69c4d5baf4921bc707c40c9b0f671906513d55752a09a0453aa4bc29e1131e18b3a4ca019480b44804ae87619783a1b4c69edc376ae6c36419eac09a535f5c1d6eedf8a0616bb4cafad33259c7a4f3996fc0e0ebda88aac2ebbd1de00c244cfc4d7e37a6faa12773b7a79f6ff8f8faf46cd6db57216cb3f42eee1b8fe45195ad4551b3be8057d1b40555d27da8f685d3ea9e00100952f86659984dff9cd410b7abd7d069380f9a35fba1472bd5f7612a6961d31b3fe88b2538b49e986a144b61cba104f34e93259808019921e265d6f364dcd3d33b43771f338d2292371723f7a64223ec4db6ff5c0fd176f50ef24a53fa646907394be130f3472465c19a33d632acda46f5763d22076cf7257bbb66e40f8506f022bcf9dcc583a77bac5d890f6cd54523e56c272f8dfe601136d2e3ba1ebc42c9c94ce3757cd37feff856838270b5eb6001704344775563444edac2c0b1fa45f08ecb1c78abffd9cc8f634653ae1575bcd5e4f5bc6becb89cf2a2364fa8c21c5ccc913eeb497d2a467761d99cab05a9eaa26a625880a5d0a604e81fcea9cdad468d983c9bee95127be10786a7e29ae174c2d6abf7f9d2b4f4017716853b8ee5d995344038a558a3d4773ad86740ada3f5eeef3e941e5be53d64982365623c91f25028f629246bedce6dc38417412963d37a67b53995bec57a0328bd733dc817d892fa065595b89bfbb40f947934ff98c89011513564ca5769780ef7ffee6a9342a73ec3710ac966182682b9f766ad17260c0e0052844fcf17c738ec71d0bb403be2f47b47f7029c9392a623cd177c40c42e1e5543838008b79e5780ca7526dff0c778d56f61f1f01ff55e292c8587b53a82aa82144ca88ae923a869a781039a9fc6763a30511816a9a000bae9f472d3a0ed70d93399d0eeb1da1926a03b773d14c175de8c43414023f560f58eac927e1ea24253377f10feda20e490f668d386bc0d6da987a517c2c1185e7354036325d08abca7f7d034c89ccd722f353e2bf4c56292d35d8239dbd99f0a4568b715fb224a31ecfb8ef6e986b4f3977eb551396d3672ce1ec1e3be525e23e0595b0e215fd82d3001f6dce471f31529fdeb080ad8b12b4689fa0352b18dc370c390e36de1e5ccd6cb8293fb488dfd862ed43a704269731d33efa6e1f63efb3092b404a78de2d2408b196df7ab95dd0a2e3170837a100f5f588ab7e5da41d22dc3674f6dc576f4aadccc59176bcb5c3228b19c87d7e78c8757a7e4242746aca7d67cd637700bfda5b82ec1395d8c93bad9a6374c9cedd0f6560709b0d7085dab975616d73e8504ba45d1b6858efeb821b788f292fcd9becb0f2758dd7e4d67484f1bee905c90f31a15745da4b5635e9e1c261fcff261b9a7e174fa8b300ea71eca3ae806a73fc4fb540352dfe0b1aec8ef36646c88ba86ddcb909172ca8e4b9b8a0996d60c43d26ac7f186d7bfd964b92bd840e7b6842865d55a9ab16baccb7c7a9b8efde9b7efcf64d5ef40c749a138d2f032e5ce1adbf5fb276052690c0214d748380dfaba2eaca2f2a510e52eec6e7e5adbed3a77f937d633b559bbbb2a563f1dca49139b6144b422e2116dd939c21c3e0a8215043a75a5a632713dfe855398d5c8c293e5e7df0b97670bfb60232e8881cd022a6487359ccacb54cc03b060c245e70b6aab431479d60fb15f3e991810ce26179eb75a641c37c1c68add17e4b74f3e2d25976bd307b7b2320116a70ec942a68e56d2db336b3d9b0754c61e38828ef9b0bd634aed41b253ac555925474a4177fcd81d1e414ea54386d541b73d7581a4731edb1dbe4cec8f7b93bf2f41f45d9042d369fd6a0fdfc447f00e4cc8bc9f0e1162733c10361a13378eddcbf0ba969054508c8b4d419eb1b8dfc18f19eff8fb55200ff7c784f210f7175ca370ca2881a5447d884d7e86b1077f191f45c97c8c2bc567b7fb3eb328274cd0e528314728a2fa3ee1eb3ec77593af2159fd62ffabfc67d1daf60839a17b0f3b84a427d3561b2c07032bcea2896d4ae690c5e29d394af50cb5024efac276eaa90dde9242c9611b69faabaf21bbd9f3215c6c8f503bfb8e93523730755f3d91e70f409643c71604a21ec38afbdbd978bdce7d8baf8a168a547893622c66e883e870f7eeb9db86ae8e5990e44b733ab4b304ccad6128a671dcd75412f53ad2858d737eb66824a15cdd961cd5a5ca0db90af76e5dd2edfce3d68402ee6d8489bb4eac58eecc5ef0831c2b1d8520a5433625fc963b92ad37942577ef50a47e927a8e9a7e505465740fb6ddc3581674eb7562e82d8a50fe8df926e8403f056e60d0d3c23b1e1a6442bfedcd8d45c97483c4084d6fb3c035026ae9fe46c12e084ced405a3cfd95e57a0743c7d62d689c0a8701405bfc6fd150c55ab3a62e63c36e9c37551f10be7a73c2ee348b45f4447e2214ff4cfc6c8becfc7cbebece814329b33ce3689a99e240ffc918f7dd72e68d3c174aa8266f066afbfc811a6af207c749abdc570f48a1a48b118a055e3d8132ec4459433dc5b53631e192d376f40cc2694ddb158ac388c76ddc40e39be4cbb5bfad722abde4854a48c8b0add487d7cb245019c0b0f45144cfbf09ef307974d94fd9872ee7d88d0c63ddf96cdfd8dcfaac5b7d46d7b38f7554a276c694a43b43e431bc1ffff4c7744f1d652aafe792089aa4a4ec7b2aa3c1f7e680e820035d5e7f1dac7eca1c2bc6b5ebfe03a76900f361800907f64424959ef6374fe572e6e81e6c6a4a35e8fb057a0f0b5cd83e6fa3572a820a847e1525de5d98323cef7b3287ab7d1e8bacea4fdb7ad9634e6e1b914f073d3084150f762bee67fd864414e24b1d3a466846965a12cabf11317efde5c8b0bb727b8c7a32720f284fcce46f42bdea61bef4389396a13013c8f010a47bdbfa12eb860726d0a03c8d420522de0fe3c5aa5a75c6cf075ab0038158eb125daccefe187e850a99fc578c3ba9b0614078f2dda5603b1aeb9938427c1ba751f8c1c0c165e8b36f2b9acd7edda8431381ada1181aa7f06a01522c0689bbcf76b0d157a0627824a61451e53a4ac069e54b139202f2cf691797a87bf96f55a48d089d1b768b4b291cbee2e10973244cbc37295e1644aaa38bb8cb06d587f464155166b8eaba9e9b6cfabc57c263634d29d5063f581c6b830c1e4cb6add747ab504c1649d69b28ffef9a2da9082f3cb2e1ef999c66e100c9277a602a35391b9e80f232a54a37ec4db09d9deaa0ec89cd8974f7091ca7e25cdd4f8d25a556b38052fb7a02f9827d6eac6684e5cb59cd349ec690cb370f4801f4235d5efb5bc3484c913cc72e44f46807bec063b7e0f43f784e64e767147774e006968d71f73da187aaec5549dcfe11ef95fd133da0a9acda4e3d1b03ff2badf9a11d2d90e5d1b5058cdf88c6a2ee20b7c7dda31f926e7785265e43726e570d6eeedd02831ed2982509ab2d62c3f720add756a26b39e8ca8dccd2144a6e63c835708cec4dd95c014758829694edf82a18e06b31cd6a2c2fa7f98312c8dabf661fbc182172624b0555b489bb2bd3470f54f404dd9ecdda94f9cf69b2b890b754c695862bbcaf883db6436fa2a46d35255eb660977a1abbf2769f6e9cff7010d7532aac9937792ae970d0af8913a125f772bb9d1567e2362ec2da96f721752f57be87d16e4909c7e8c5ddddce0bbb2457881001c54c719fe82a97ae771d968b8ab22a898f84e96fe225310f2059e2a0f1b75205cedd4edb9ce435955e043e1581b880d610ec2db14e28a6385ff69a06527e99edaa6f9608afb4f94279d33c69ad380287e124687d80d521e55c5be0f351a76b36693e3ccf33e8ae0c88d2c2ff020c470fa91e86d13ac34f9d937a3321d2e3c03e0bc9f61c6f82f4f9aab14cee523b7b0c61cb8939a2e07951337540ff557a6191526c42cc205069568cbdeb3c5ea6fd6ffe4cf472579d96eae04e03c9c413a9768f9ee0ec4474dfa185f74f00c0ee19cd462f6e8ec143dd5849579e0b8dd21f826f0caab644ce871ff7a57f242215cf623aecaf8d867ad9246d825a750ef1dc30e99d85ccb9c86f7a44bf0c744bc1f84a36fe680010da6d4cf8aef9d44c2840152a7c0eb6e9671c4a2bd83c3f8e313487bb1580df3e886e388ee071acb1f83d66917ab9625014b9716"], 0x1024}}, 0x24000154)
preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/253, 0xfd}], 0x2, 0xffff, 0x6)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000001c0)=0x81)

16:29:25 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x4, 0x0, 0x28b}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600), 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6825, 0x7, 0x1, 0x7fc00000}, {0x4, 0x0, 0x6, 0x2}, {0x101, 0x0, 0x7f, 0x1ff}]})

16:29:25 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x500000000000000)

[ 3112.447938] loop2: detected capacity change from 0 to 40
[ 3112.488111] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: writeback.
[ 3112.552321] syz-executor.6 uses obsolete (PF_INET,SOCK_PACKET)
16:29:25 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x600000000000000)

[ 3112.605427] 
[ 3112.605676] ======================================================
[ 3112.606373] WARNING: possible circular locking dependency detected
[ 3112.607062] 6.2.0-next-20230224 #1 Not tainted
[ 3112.607642] ------------------------------------------------------
[ 3112.608445] syz-executor.3/10350 is trying to acquire lock:
[ 3112.609157] ffff88801636c880 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xd80
[ 3112.610459] 
[ 3112.610459] but task is already holding lock:
[ 3112.611189] ffff88801636c920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250
[ 3112.612399] 
[ 3112.612399] which lock already depends on the new lock.
[ 3112.612399] 
[ 3112.613394] 
[ 3112.613394] the existing dependency chain (in reverse order) is:
[ 3112.614317] 
[ 3112.614317] -> #1 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}:
[ 3112.615203]        __mutex_lock+0x133/0x14a0
[ 3112.615793]        hci_cmd_sync_work+0x1e6/0x320
[ 3112.616430]        process_one_work+0xa0f/0x1790
[ 3112.617258]        worker_thread+0x63b/0x1260
[ 3112.618155]        kthread+0x2e9/0x3a0
[ 3112.618835]        ret_from_fork+0x2c/0x50
[ 3112.619935] 
[ 3112.619935] -> #0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}:
[ 3112.621410]        __lock_acquire+0x2d56/0x6380
[ 3112.622019]        lock_acquire.part.0+0xea/0x320
[ 3112.622628]        __flush_work+0x109/0xd80
[ 3112.623179]        __cancel_work_timer+0x39c/0x4e0
[ 3112.623775]        hci_cmd_sync_clear+0x52/0x250
[ 3112.624386]        hci_unregister_dev+0xf9/0x410
[ 3112.624978]        vhci_release+0x80/0x100
[ 3112.625514]        __fput+0x263/0xa40
[ 3112.625986]        task_work_run+0x174/0x280
[ 3112.626538]        do_exit+0xad8/0x2800
[ 3112.627030]        do_group_exit+0xd4/0x2a0
[ 3112.627569]        get_signal+0x23c8/0x2450
[ 3112.628105]        arch_do_signal_or_restart+0x79/0x590
[ 3112.628781]        exit_to_user_mode_prepare+0x122/0x190
[ 3112.629460]        syscall_exit_to_user_mode+0x1d/0x50
[ 3112.630114]        do_syscall_64+0x4c/0x90
[ 3112.630640]        entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3112.631331] 
[ 3112.631331] other info that might help us debug this:
[ 3112.631331] 
[ 3112.632274]  Possible unsafe locking scenario:
[ 3112.632274] 
[ 3112.633015]        CPU0                    CPU1
[ 3112.633585]        ----                    ----
[ 3112.634164]   lock(&hdev->cmd_sync_work_lock);
[ 3112.634739]                                lock((work_completion)(&hdev->cmd_sync_work));
[ 3112.635740]                                lock(&hdev->cmd_sync_work_lock);
[ 3112.636636]   lock((work_completion)(&hdev->cmd_sync_work));
[ 3112.637364] 
[ 3112.637364]  *** DEADLOCK ***
[ 3112.637364] 
[ 3112.638089] 1 lock held by syz-executor.3/10350:
[ 3112.638679]  #0: ffff88801636c920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250
[ 3112.639938] 
[ 3112.639938] stack backtrace:
[ 3112.640511] CPU: 0 PID: 10350 Comm: syz-executor.3 Not tainted 6.2.0-next-20230224 #1
[ 3112.641480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3112.642497] Call Trace:
[ 3112.642827]  <TASK>
[ 3112.643120]  dump_stack_lvl+0x91/0xf0
[ 3112.643623]  check_noncircular+0x263/0x2e0
[ 3112.644178]  ? __pfx_check_noncircular+0x10/0x10
[ 3112.644815]  ? __pfx_mark_lock.part.0+0x10/0x10
[ 3112.645434]  ? save_trace+0x285/0xcb0
[ 3112.645937]  ? __pfx_register_lock_class+0x10/0x10
[ 3112.646585]  __lock_acquire+0x2d56/0x6380
[ 3112.647142]  ? __pfx___lock_acquire+0x10/0x10
[ 3112.647747]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3112.648461]  lock_acquire.part.0+0xea/0x320
[ 3112.649035]  ? __flush_work+0xdd/0xd80
[ 3112.649560]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 3112.650203]  ? __flush_work+0xdd/0xd80
[ 3112.650727]  ? rcu_read_lock_sched_held+0x42/0x80
[ 3112.651344]  ? trace_lock_acquire+0x170/0x1e0
[ 3112.651932]  ? __flush_work+0xdd/0xd80
[ 3112.652453]  ? lock_acquire+0x32/0xc0
[ 3112.652961]  ? __flush_work+0xdd/0xd80
[ 3112.653477]  __flush_work+0x109/0xd80
[ 3112.653980]  ? __flush_work+0xdd/0xd80
[ 3112.654495]  ? __pfx_mark_lock.part.0+0x10/0x10
[ 3112.655102]  ? __pfx___flush_work+0x10/0x10
[ 3112.655668]  ? lock_acquire.part.0+0xea/0x320
[ 3112.656288]  ? hci_cmd_sync_clear+0x45/0x250
[ 3112.656866]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 3112.657509]  ? hci_cmd_sync_clear+0x45/0x250
[ 3112.658081]  ? rcu_read_lock_sched_held+0x42/0x80
[ 3112.658696]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 3112.659439]  ? lock_is_held_type+0x9f/0x120
[ 3112.660006]  ? mark_held_locks+0x9e/0xe0
[ 3112.660561]  __cancel_work_timer+0x39c/0x4e0
[ 3112.661118]  ? __pfx___cancel_work_timer+0x10/0x10
[ 3112.661750]  ? __cancel_work_timer+0x2aa/0x4e0
[ 3112.662335]  ? __pfx___cancel_work_timer+0x10/0x10
[ 3112.662956]  ? lock_release+0x1e3/0x710
[ 3112.663488]  ? __pfx_lock_release+0x10/0x10
[ 3112.664054]  ? do_raw_write_lock+0x11e/0x3b0
[ 3112.664642]  ? __pfx_vhci_release+0x10/0x10
[ 3112.665195]  hci_cmd_sync_clear+0x52/0x250
[ 3112.665742]  ? __pfx_vhci_release+0x10/0x10
[ 3112.666308]  hci_unregister_dev+0xf9/0x410
[ 3112.666854]  vhci_release+0x80/0x100
[ 3112.667345]  __fput+0x263/0xa40
[ 3112.667776]  task_work_run+0x174/0x280
[ 3112.668293]  ? __pfx_task_work_run+0x10/0x10
[ 3112.668866]  ? switch_task_namespaces+0xb1/0xd0
[ 3112.669460]  ? kmem_cache_free+0xff/0x510
[ 3112.669992]  do_exit+0xad8/0x2800
[ 3112.670448]  ? find_held_lock+0x2c/0x110
[ 3112.670971]  ? lock_release+0x1e3/0x710
[ 3112.671504]  ? __pfx_do_exit+0x10/0x10
[ 3112.672004]  ? do_raw_spin_lock+0x125/0x270
[ 3112.672569]  do_group_exit+0xd4/0x2a0
[ 3112.673068]  get_signal+0x23c8/0x2450
[ 3112.673592]  ? __pfx___handle_mm_fault+0x10/0x10
[ 3112.674202]  ? __pfx_get_signal+0x10/0x10
[ 3112.675032]  ? do_futex+0x13a/0x380
[ 3112.675622]  ? __pfx_do_futex+0x10/0x10
[ 3112.676285]  arch_do_signal_or_restart+0x79/0x590
[ 3112.677030]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 3112.677848]  ? __x64_sys_futex+0x1ca/0x4d0
[ 3112.678550]  exit_to_user_mode_prepare+0x122/0x190
[ 3112.679315]  syscall_exit_to_user_mode+0x1d/0x50
[ 3112.680049]  do_syscall_64+0x4c/0x90
[ 3112.680626]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3112.681403] RIP: 0033:0x7f75bfaf9b19
[ 3112.681972] Code: Unable to access opcode bytes at 0x7f75bfaf9aef.
[ 3112.682887] RSP: 002b:00007f75bd06f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 3112.683998] RAX: fffffffffffffe00 RBX: 00007f75bfc0cf68 RCX: 00007f75bfaf9b19
[ 3112.684979] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f75bfc0cf68
[ 3112.685884] RBP: 00007f75bfc0cf60 R08: 0000000000000000 R09: 0000000000000000
[ 3112.686760] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f75bfc0cf6c
[ 3112.687675] R13: 00007ffda9f0b64f R14: 00007f75bd06f300 R15: 0000000000022000
[ 3112.688560]  </TASK>
16:29:25 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x700000000000000)

16:29:25 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, 0x0, 0x140)

[ 3112.837821] loop2: detected capacity change from 0 to 40
[ 3115.496981] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 3115.498627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 3115.500917] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 3115.503608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 3115.505008] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 3115.506719] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 3117.531269] Bluetooth: hci5: command 0x0409 tx timeout
[ 3119.579269] Bluetooth: hci5: command 0x041b tx timeout
[ 3121.628283] Bluetooth: hci5: command 0x040f tx timeout

VM DIAGNOSIS:
16:29:25  Registers:
info registers vcpu 0
RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff825027d0 RDI=ffffffff87f10da0 RBP=ffffffff87f10d60 RSP=ffff888041f86ef8
R8 =0000000000000001 R9 =ffff888041f86e83 R10=ffffed10083f0dd0 R11=0000000000000001
R12=000000000000002e R13=ffffffff87f10d60 R14=ffffffff87f10db0 R15=ffffffff87f11018
RIP=ffffffff82502825 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe1b513da000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe1b513d8000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2c223000 CR3=0000000015a32000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffff88806c400000 RBX=00000000b45f3c33 RCX=ffff88806cb9e198 RDX=0000000000000006
RSI=0000000000000003 RDI=000000005fbc3fc2 RBP=ffff88801011d310 RSP=ffff8880161f7b50
R8 =00000000101f21c1 R9 =ffffffff85d27a97 R10=fffffbfff0ba4f52 R11=0000000000000001
R12=0000000000000001 R13=0000000000000800 R14=ffff8880161f7bd8 R15=0000000000000006
RIP=ffffffff82272233 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fc5b3a188c0 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe08bef65000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe08bef63000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055f95b10c938 CR3=000000000e09e000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f
XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=00000000000000006c6175747269762f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=000055f95b0c36500000000000000004 XMM07=00000000000000000000000000000000
XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000