='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2447.330265] loop3: detected capacity change from 0 to 40
[ 2447.341934] loop6: detected capacity change from 0 to 40
[ 2447.403796] syz-executor.5: attempt to access beyond end of device
[ 2447.403796] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2447.406369] Buffer I/O error on dev loop5, logical block 10, lost async page write
22:29:07 executing program 5:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2447.521173] syz-executor.2: attempt to access beyond end of device
[ 2447.521173] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2447.523017] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2447.529940] syz-executor.7: attempt to access beyond end of device
[ 2447.529940] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2447.531849] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2447.592309] syz-executor.4: attempt to access beyond end of device
[ 2447.592309] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2447.594215] Buffer I/O error on dev loop4, logical block 10, lost async page write
22:29:07 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, 0x0, 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:29:07 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:29:07 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:29:07 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2447.703797] loop6: detected capacity change from 0 to 40
22:29:07 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:29:07 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="5e2f7b696c653000cffa3564b020f53564a56e79b944ea7ef5ee81eb31bea1b606b4b073832268194001ec719badb0b168f828c49da2c0dff2c729b837293655372b66b092f45dc1d3ed85908307c4fd23ecdafaf16c9bf4da59cb200d76bc857f8efeb00161721be6bd4424c7951bbcf82e98a28f0864f6690597816fcc68fd537ed3ba5c904ab0632e1614d932459b7567947b46cef356f34f8565e0e295523381202ffaead07f6dd178d09a160e0b12c9f8eb36efe2aaec3ec10710c74bab5a7b3fc06c769f08cde92785fdda6dfc94420c83bf41137d9821a1f654600029c78dc237ad89ed6f7b97a13b83aeaba3e7f3623f594250809affb1746b23c3250527c34413ee82062a96e5b50b3729694ff13d6181292a478f935a4d3cb3694df02e96f301a4a5cf2d561ff04fe4ae46e64def4022a93f115aae95984e36ac57e7e7961c1c62c4a46c9a47332489a9174627723f01dc832997ca647adf94bc4212664705827dd5d33b64367ca3258d718570d48e4509e7220740c5ffe4425753e809ffff4c43c3f8fc50e253a39d125e2ef781ede8345bd1a3fc43059624818d38b3a2b508e640ee783830d89d1f5afe0fa65890fa934eca323831ce37"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2447.796278] loop0: detected capacity change from 0 to 40
22:29:07 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2447.835298] loop7: detected capacity change from 0 to 40
[ 2447.838341] loop3: detected capacity change from 0 to 40
[ 2447.865118] loop2: detected capacity change from 0 to 40
[ 2447.917176] loop4: detected capacity change from 0 to 40
22:29:07 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2447.985780] syz-executor.7: attempt to access beyond end of device
[ 2447.985780] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2447.987694] Buffer I/O error on dev loop7, logical block 10, lost async page write
22:29:07 executing program 5:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2448.035128] syz-executor.0: attempt to access beyond end of device
[ 2448.035128] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2448.037070] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2448.043211] syz-executor.2: attempt to access beyond end of device
[ 2448.043211] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2448.045267] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2448.099395] loop6: detected capacity change from 0 to 40
[ 2448.128108] syz-executor.4: attempt to access beyond end of device
[ 2448.128108] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2448.130187] Buffer I/O error on dev loop4, logical block 10, lost async page write
22:29:07 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:29:07 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:29:07 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:29:07 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:29:07 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2448.306894] loop3: detected capacity change from 0 to 40
[ 2448.307797] loop7: detected capacity change from 0 to 40
[ 2448.321594] loop2: detected capacity change from 0 to 40
[ 2448.328926] syz-executor.6: attempt to access beyond end of device
[ 2448.328926] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2448.330765] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2448.382335] loop0: detected capacity change from 0 to 40
[ 2448.450853] syz-executor.7: attempt to access beyond end of device
[ 2448.450853] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2448.452729] Buffer I/O error on dev loop7, logical block 10, lost async page write
22:29:26 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2466.580879] loop7: detected capacity change from 0 to 40
22:29:26 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:29:26 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:29:26 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="5e2f7b696c653000cffa3564b020f53564a56e79b944ea7ef5ee81eb31bea1b606b4b073832268194001ec719badb0b168f828c49da2c0dff2c729b837293655372b66b092f45dc1d3ed85908307c4fd23ecdafaf16c9bf4da59cb200d76bc857f8efeb00161721be6bd4424c7951bbcf82e98a28f0864f6690597816fcc68fd537ed3ba5c904ab0632e1614d932459b7567947b46cef356f34f8565e0e295523381202ffaead07f6dd178d09a160e0b12c9f8eb36efe2aaec3ec10710c74bab5a7b3fc06c769f08cde92785fdda6dfc94420c83bf41137d9821a1f654600029c78dc237ad89ed6f7b97a13b83aeaba3e7f3623f594250809affb1746b23c3250527c34413ee82062a96e5b50b3729694ff13d6181292a478f935a4d3cb3694df02e96f301a4a5cf2d561ff04fe4ae46e64def4022a93f115aae95984e36ac57e7e7961c1c62c4a46c9a47332489a9174627723f01dc832997ca647adf94bc4212664705827dd5d33b64367ca3258d718570d48e4509e7220740c5ffe4425753e809ffff4c43c3f8fc50e253a39d125e2ef781ede8345bd1a3fc43059624818d38b3a2b508e640ee783830d89d1f5afe0fa65890fa934eca323831ce37"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:29:26 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:29:26 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:29:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:29:26 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2466.604320] loop5: detected capacity change from 0 to 40
[ 2466.618430] loop3: detected capacity change from 0 to 40
[ 2466.621897] loop0: detected capacity change from 0 to 40
[ 2466.624725] loop4: detected capacity change from 0 to 40
[ 2466.627969] loop2: detected capacity change from 0 to 40
[ 2466.659023] bio_check_eod: 2 callbacks suppressed
[ 2466.659036] syz-executor.7: attempt to access beyond end of device
[ 2466.659036] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2466.660471] buffer_io_error: 2 callbacks suppressed
[ 2466.660479] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2466.668062] loop6: detected capacity change from 0 to 40
[ 2466.715162] syz-executor.5: attempt to access beyond end of device
[ 2466.715162] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2466.716210] Buffer I/O error on dev loop5, logical block 10, lost async page write
22:29:26 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:29:26 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2466.797691] syz-executor.2: attempt to access beyond end of device
[ 2466.797691] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2466.799667] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2466.816471] syz-executor.4: attempt to access beyond end of device
[ 2466.816471] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2466.818230] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2466.829752] loop7: detected capacity change from 0 to 40
[ 2466.831821] loop3: detected capacity change from 0 to 40
[ 2466.844876] syz-executor.0: attempt to access beyond end of device
[ 2466.844876] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2466.846650] Buffer I/O error on dev loop0, logical block 10, lost async page write
22:29:26 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2466.864902] syz-executor.6: attempt to access beyond end of device
[ 2466.864902] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2466.866737] Buffer I/O error on dev loop6, logical block 10, lost async page write
22:29:26 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="5e2f7b696c653000cffa3564b020f53564a56e79b944ea7ef5ee81eb31bea1b606b4b073832268194001ec719badb0b168f828c49da2c0dff2c729b837293655372b66b092f45dc1d3ed85908307c4fd23ecdafaf16c9bf4da59cb200d76bc857f8efeb00161721be6bd4424c7951bbcf82e98a28f0864f6690597816fcc68fd537ed3ba5c904ab0632e1614d932459b7567947b46cef356f34f8565e0e295523381202ffaead07f6dd178d09a160e0b12c9f8eb36efe2aaec3ec10710c74bab5a7b3fc06c769f08cde92785fdda6dfc94420c83bf41137d9821a1f654600029c78dc237ad89ed6f7b97a13b83aeaba3e7f3623f594250809affb1746b23c3250527c34413ee82062a96e5b50b3729694ff13d6181292a478f935a4d3cb3694df02e96f301a4a5cf2d561ff04fe4ae46e64def4022a93f115aae95984e36ac57e7e7961c1c62c4a46c9a47332489a9174627723f01dc832997ca647adf94bc4212664705827dd5d33b64367ca3258d718570d48e4509e7220740c5ffe4425753e809ffff4c43c3f8fc50e253a39d125e2ef781ede8345bd1a3fc43059624818d38b3a2b508e640ee783830d89d1f5afe0fa65890fa934eca323831ce3772c2825d"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2466.917705] syz-executor.7: attempt to access beyond end of device
[ 2466.917705] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2466.918872] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2466.938786] loop5: detected capacity change from 0 to 40
[ 2467.052266] syz-executor.5: attempt to access beyond end of device
[ 2467.052266] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2467.054039] Buffer I/O error on dev loop5, logical block 10, lost async page write
22:29:43 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, 0x0, 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:29:43 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:29:43 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:29:43 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:29:43 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {0x0}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:29:43 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:29:43 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:29:43 executing program 0:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2483.908592] loop3: detected capacity change from 0 to 40
[ 2483.936803] loop4: detected capacity change from 0 to 40
[ 2483.944349] loop2: detected capacity change from 0 to 40
[ 2483.944442] loop5: detected capacity change from 0 to 40
[ 2483.948709] loop6: detected capacity change from 0 to 40
[ 2483.952689] loop7: detected capacity change from 0 to 40
[ 2484.127823] syz-executor.2: attempt to access beyond end of device
[ 2484.127823] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2484.129630] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2484.158090] syz-executor.7: attempt to access beyond end of device
[ 2484.158090] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2484.159885] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2484.169820] syz-executor.6: attempt to access beyond end of device
[ 2484.169820] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2484.171944] Buffer I/O error on dev loop6, logical block 10, lost async page write
22:29:43 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, 0x0, 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2484.198101] syz-executor.4: attempt to access beyond end of device
[ 2484.198101] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2484.199894] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2484.202014] syz-executor.5: attempt to access beyond end of device
[ 2484.202014] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2484.205979] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2484.272830] loop3: detected capacity change from 0 to 40
22:29:43 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:29:43 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:29:43 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {0x0}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:29:44 executing program 0:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:29:44 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:29:44 executing program 5:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r1 = gettid()
migrate_pages(r1, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {0x6}}, './file1\x00'})
pwritev(r3, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

22:29:44 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2484.455429] loop7: detected capacity change from 0 to 40
[ 2484.461250] loop2: detected capacity change from 0 to 40
[ 2484.483368] loop6: detected capacity change from 0 to 40
[ 2484.515332] loop4: detected capacity change from 0 to 40
22:29:44 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, 0x0, 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2484.642406] syz-executor.6: attempt to access beyond end of device
[ 2484.642406] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2484.642405] syz-executor.2: attempt to access beyond end of device
[ 2484.642405] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2484.643733] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2484.647062] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2484.656786] syz-executor.7: attempt to access beyond end of device
[ 2484.656786] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2484.658901] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2484.699801] syz-executor.4: attempt to access beyond end of device
[ 2484.699801] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2484.701100] Buffer I/O error on dev loop4, logical block 10, lost async page write
22:29:44 executing program 5:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r1 = gettid()
migrate_pages(r1, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {0x6}}, './file1\x00'})
pwritev(r3, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

22:29:44 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {0x0}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:29:44 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:29:44 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:29:44 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2484.834871] loop3: detected capacity change from 0 to 40
[ 2484.841703] loop6: detected capacity change from 0 to 40
[ 2484.905699] syz-executor.3: attempt to access beyond end of device
[ 2484.905699] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2484.906904] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2484.931828] loop2: detected capacity change from 0 to 40
[ 2484.935153] loop7: detected capacity change from 0 to 40
22:29:59 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:29:59 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:29:59 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:29:59 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:29:59 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)

[ 2499.675937] loop4: detected capacity change from 0 to 40
22:29:59 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="5e2f7b696c653000cffa3564b020f53564a56e79b944ea7ef5ee81eb31bea1b606b4b073832268194001ec719badb0b168f828c49da2c0dff2c729b837293655372b66b092f45dc1d3ed85908307c4fd23ecdafaf16c9bf4da59cb200d76bc857f8efeb00161721be6bd4424c7951bbcf82e98a28f0864f6690597816fcc68fd537ed3ba5c904ab0632e1614d932459b7567947b46cef356f34f8565e0e295523381202ffaead07f6dd178d09a160e0b12c9f8eb36efe2aaec3ec10710c74bab5a7b3fc06c769f08cde92785fdda6dfc94420c83bf41137d9821a1f654600029c78dc237ad89ed6f7b97a13b83aeaba3e7f3623f594250809affb1746b23c3250527c34413ee82062a96e5b50b3729694ff13d6181292a478f935a4d3cb3694df02e96f301a4a5cf2d561ff04fe4ae46e64def4022a93f115aae95984e36ac57e7e7961c1c62c4a46c9a47332489a9174627723f01dc832997ca647adf94bc4212664705827dd5d33b64367ca3258d718570d48e4509e7220740c5ffe4425753e809ffff4c43c3f8fc50e253a39d125e2ef781ede8345bd1a3fc43059624818d38b3a2b508e640ee783830d89d1f5afe0fa65890fa934eca323831ce3772c2825d436e"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:29:59 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:29:59 executing program 0:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2499.700124] bio_check_eod: 3 callbacks suppressed
[ 2499.700138] syz-executor.4: attempt to access beyond end of device
[ 2499.700138] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2499.701412] buffer_io_error: 3 callbacks suppressed
[ 2499.701420] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2499.709712] loop2: detected capacity change from 0 to 40
[ 2499.720284] loop3: detected capacity change from 0 to 40
[ 2499.724933] loop7: detected capacity change from 0 to 40
[ 2499.746304] loop5: detected capacity change from 0 to 40
[ 2499.747626] loop6: detected capacity change from 0 to 40
[ 2499.815424] syz-executor.2: attempt to access beyond end of device
[ 2499.815424] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2499.816772] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2499.821138] syz-executor.7: attempt to access beyond end of device
[ 2499.821138] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2499.822733] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2499.846735] syz-executor.3: attempt to access beyond end of device
[ 2499.846735] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2499.848134] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2499.918498] syz-executor.6: attempt to access beyond end of device
[ 2499.918498] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2499.919656] Buffer I/O error on dev loop6, logical block 10, lost async page write
22:30:12 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:30:12 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:30:12 executing program 5:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2513.205955] loop7: detected capacity change from 0 to 40
[ 2513.212278] loop0: detected capacity change from 0 to 40
22:30:12 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:30:12 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:30:12 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:30:12 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:30:12 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2513.227499] loop6: detected capacity change from 0 to 40
[ 2513.234461] loop4: detected capacity change from 0 to 40
[ 2513.234677] loop2: detected capacity change from 0 to 40
[ 2513.262372] loop3: detected capacity change from 0 to 40
[ 2513.285991] syz-executor.7: attempt to access beyond end of device
[ 2513.285991] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2513.286962] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2513.326454] syz-executor.0: attempt to access beyond end of device
[ 2513.326454] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2513.327489] Buffer I/O error on dev loop0, logical block 10, lost async page write
22:30:13 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2513.360176] syz-executor.4: attempt to access beyond end of device
[ 2513.360176] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2513.361475] Buffer I/O error on dev loop4, logical block 10, lost async page write
22:30:13 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2513.417084] syz-executor.3: attempt to access beyond end of device
[ 2513.417084] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2513.418230] Buffer I/O error on dev loop3, logical block 10, lost async page write
22:30:13 executing program 0:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2513.455427] syz-executor.2: attempt to access beyond end of device
[ 2513.455427] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2513.457490] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2513.462727] loop7: detected capacity change from 0 to 40
22:30:13 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2513.496395] syz-executor.6: attempt to access beyond end of device
[ 2513.496395] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2513.498166] Buffer I/O error on dev loop6, logical block 10, lost async page write
22:30:13 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:30:13 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 2513.567957] syz-executor.7: attempt to access beyond end of device
[ 2513.567957] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2513.568936] Buffer I/O error on dev loop7, logical block 10, lost async page write
22:30:13 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:30:13 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2513.641947] loop4: detected capacity change from 0 to 40
22:30:13 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2513.659276] loop3: detected capacity change from 0 to 40
[ 2513.659825] loop2: detected capacity change from 0 to 40
[ 2513.666676] loop6: detected capacity change from 0 to 40
22:30:13 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 2513.746410] loop7: detected capacity change from 0 to 40
22:30:13 executing program 0:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r1 = gettid()
migrate_pages(r1, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {0x6}}, './file1\x00'})
pwritev(r3, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

[ 2513.761337] loop5: detected capacity change from 0 to 40
[ 2513.770492] syz-executor.6: attempt to access beyond end of device
[ 2513.770492] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2513.771454] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2513.844509] syz-executor.7: attempt to access beyond end of device
[ 2513.844509] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2513.845623] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2513.848022] syz-executor.4: attempt to access beyond end of device
[ 2513.848022] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2513.849820] Buffer I/O error on dev loop4, logical block 10, lost async page write
22:30:27 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:30:27 executing program 0:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r1 = gettid()
migrate_pages(r1, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
pwritev(r3, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

[ 2527.714349] loop3: detected capacity change from 0 to 40
22:30:27 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:30:27 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:30:27 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2527.731511] loop4: detected capacity change from 0 to 40
[ 2527.747457] loop6: detected capacity change from 0 to 40
22:30:27 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:30:27 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2527.750966] loop5: detected capacity change from 0 to 40
22:30:27 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f00000002c0)='\x00', 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 2527.764739] loop7: detected capacity change from 0 to 40
[ 2527.813992] loop2: detected capacity change from 0 to 40
[ 2527.829242] bio_check_eod: 3 callbacks suppressed
[ 2527.829254] syz-executor.6: attempt to access beyond end of device
[ 2527.829254] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2527.831321] buffer_io_error: 3 callbacks suppressed
[ 2527.831330] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2527.838327] syz-executor.5: attempt to access beyond end of device
[ 2527.838327] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2527.839622] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2527.873110] syz-executor.7: attempt to access beyond end of device
[ 2527.873110] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2527.874273] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2527.922700] syz-executor.4: attempt to access beyond end of device
[ 2527.922700] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2527.924638] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2527.937403] syz-executor.3: attempt to access beyond end of device
[ 2527.937403] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2527.939309] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2527.950433] syz-executor.2: attempt to access beyond end of device
[ 2527.950433] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2527.951767] Buffer I/O error on dev loop2, logical block 10, lost async page write
22:30:27 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:30:27 executing program 0:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="5e2f7b696c653000cffa3564b020f53564a56e79b944ea7ef5ee81eb31bea1b606b4b073832268194001ec719badb0b168f828c49da2c0dff2c729b837293655372b66b092f45dc1d3ed85908307c4fd23ecdafaf16c9bf4da59cb200d76bc857f8efeb00161721be6bd4424c7951bbcf82e98a28f0864f6690597816fcc68fd537ed3ba5c904ab0632e1614d932459b7567947b46cef356f34f8565e0e295523381202ffaead07f6dd178d09a160e0b12c9f8eb36efe2aaec3ec10710c74bab5a7b3fc06c769f08cde92785fdda6dfc94420c83bf41137d9821a1f654600029c78dc237ad89ed6f7b97a13b83aeaba3e7f3623f594250809affb1746b23c3250527c34413ee82062a96e5b50b3729694ff13d6181292a478f935a4d3cb3694df02e96f301a4a5cf2d561ff04fe4ae46e64def4022a93f115aae95984e36ac57e7e7961c1c62c4a46c9a47332489a9174627723f01dc832997ca647adf94bc4212664705827dd5d33b64367ca3258d718570d48e4509e7220740c5ffe4425753e809ffff4c43c3f8fc50e253a39d125e2ef781ede8345bd1a3fc43059624818d38b3a2b508e640ee783830d89d1f5afe0fa65890fa934eca323831ce3772c2825d436ecd"])
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:30:27 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:30:27 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2528.016028] loop6: detected capacity change from 0 to 40
[ 2528.033509] loop5: detected capacity change from 0 to 40
22:30:27 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f00000002c0)='\x00', 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:30:27 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:30:27 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2528.079356] loop7: detected capacity change from 0 to 40
22:30:27 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2528.139869] loop2: detected capacity change from 0 to 40
[ 2528.150874] loop4: detected capacity change from 0 to 40
[ 2528.166154] syz-executor.7: attempt to access beyond end of device
[ 2528.166154] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2528.167509] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2528.178988] syz-executor.5: attempt to access beyond end of device
[ 2528.178988] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2528.180364] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2528.185383] syz-executor.6: attempt to access beyond end of device
[ 2528.185383] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2528.187401] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2528.199716] loop3: detected capacity change from 0 to 40
[ 2528.212495] syz-executor.2: attempt to access beyond end of device
[ 2528.212495] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2528.213934] Buffer I/O error on dev loop2, logical block 10, lost async page write
22:30:42 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:30:42 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:30:42 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:30:42 executing program 5:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r1 = gettid()
migrate_pages(r1, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
pwritev(r3, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

22:30:42 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f00000002c0)='\x00', 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:30:42 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:30:42 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:30:42 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2543.072450] loop3: detected capacity change from 0 to 40
[ 2543.077490] loop6: detected capacity change from 0 to 40
[ 2543.089434] loop7: detected capacity change from 0 to 40
[ 2543.098409] loop4: detected capacity change from 0 to 40
[ 2543.121995] loop2: detected capacity change from 0 to 40
[ 2543.124476] loop0: detected capacity change from 0 to 40
22:30:42 executing program 5:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r1 = gettid()
migrate_pages(r1, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
pwritev(r3, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

[ 2543.179336] bio_check_eod: 2 callbacks suppressed
[ 2543.179400] syz-executor.7: attempt to access beyond end of device
[ 2543.179400] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2543.183145] buffer_io_error: 2 callbacks suppressed
[ 2543.183164] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2543.233963] syz-executor.6: attempt to access beyond end of device
[ 2543.233963] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2543.236687] Buffer I/O error on dev loop6, logical block 10, lost async page write
22:30:42 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2543.299841] syz-executor.4: attempt to access beyond end of device
[ 2543.299841] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2543.302232] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2543.304785] syz-executor.2: attempt to access beyond end of device
[ 2543.304785] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2543.306862] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2543.311362] syz-executor.3: attempt to access beyond end of device
[ 2543.311362] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2543.313234] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2543.414692] syz-executor.0: attempt to access beyond end of device
[ 2543.414692] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2543.417189] Buffer I/O error on dev loop0, logical block 10, lost async page write
22:30:43 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:30:43 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:30:43 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {0x0}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:30:43 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:30:43 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2543.550298] loop2: detected capacity change from 0 to 40
[ 2543.557021] loop7: detected capacity change from 0 to 40
[ 2543.580275] loop3: detected capacity change from 0 to 40
[ 2543.588410] loop4: detected capacity change from 0 to 40
[ 2543.623438] loop6: detected capacity change from 0 to 40
22:30:43 executing program 0:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r1 = gettid()
migrate_pages(r1, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
pwritev(r3, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

22:30:43 executing program 5:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r1 = gettid()
migrate_pages(r1, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
pwritev(r3, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

[ 2543.720839] syz-executor.7: attempt to access beyond end of device
[ 2543.720839] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2543.722588] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2543.769346] syz-executor.3: attempt to access beyond end of device
[ 2543.769346] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2543.771278] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2543.779135] syz-executor.2: attempt to access beyond end of device
[ 2543.779135] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2543.781177] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2543.796853] syz-executor.4: attempt to access beyond end of device
[ 2543.796853] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2543.798915] Buffer I/O error on dev loop4, logical block 10, lost async page write
22:30:43 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:30:43 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:30:43 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {0x0}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:30:43 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:30:43 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2544.028325] loop7: detected capacity change from 0 to 40
[ 2544.080750] loop3: detected capacity change from 0 to 40
[ 2544.084614] loop2: detected capacity change from 0 to 40
[ 2544.118432] loop6: detected capacity change from 0 to 40
22:31:00 executing program 5:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r1 = gettid()
migrate_pages(r1, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
pwritev(r3, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

22:31:00 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:31:00 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2560.747428] loop6: detected capacity change from 0 to 40
22:31:00 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:31:00 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:31:00 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:31:00 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {0x0}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:31:00 executing program 0:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r1 = gettid()
migrate_pages(r1, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
pwritev(r3, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

[ 2560.811154] loop2: detected capacity change from 0 to 40
[ 2560.832443] loop3: detected capacity change from 0 to 40
[ 2560.837985] loop4: detected capacity change from 0 to 40
[ 2560.844013] loop7: detected capacity change from 0 to 40
[ 2560.860445] bio_check_eod: 5 callbacks suppressed
[ 2560.860455] syz-executor.6: attempt to access beyond end of device
[ 2560.860455] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2560.861876] buffer_io_error: 5 callbacks suppressed
[ 2560.861884] Buffer I/O error on dev loop6, logical block 10, lost async page write
22:31:00 executing program 5:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r1 = gettid()
migrate_pages(r1, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
pwritev(r3, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

[ 2560.918301] syz-executor.2: attempt to access beyond end of device
[ 2560.918301] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2560.919233] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2560.985188] syz-executor.3: attempt to access beyond end of device
[ 2560.985188] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2560.986255] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2561.018242] syz-executor.4: attempt to access beyond end of device
[ 2561.018242] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2561.020282] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2561.025821] syz-executor.7: attempt to access beyond end of device
[ 2561.025821] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2561.027986] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2579.506781] loop0: detected capacity change from 0 to 40
22:31:19 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:31:19 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:31:19 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:31:19 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:31:19 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 2579.516217] loop7: detected capacity change from 0 to 40
22:31:19 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:31:19 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:31:19 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2579.541550] loop3: detected capacity change from 0 to 40
[ 2579.548076] loop6: detected capacity change from 0 to 40
[ 2579.548329] loop5: detected capacity change from 0 to 40
[ 2579.572370] loop2: detected capacity change from 0 to 40
[ 2579.577489] loop4: detected capacity change from 0 to 40
[ 2579.641781] syz-executor.0: attempt to access beyond end of device
[ 2579.641781] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2579.642831] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2579.653467] syz-executor.7: attempt to access beyond end of device
[ 2579.653467] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2579.655383] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2579.662321] syz-executor.3: attempt to access beyond end of device
[ 2579.662321] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2579.664188] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2579.669761] syz-executor.5: attempt to access beyond end of device
[ 2579.669761] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2579.670747] Buffer I/O error on dev loop5, logical block 10, lost async page write
22:31:19 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2579.766895] syz-executor.2: attempt to access beyond end of device
[ 2579.766895] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
22:31:19 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2579.768756] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2579.773288] syz-executor.6: attempt to access beyond end of device
[ 2579.773288] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2579.775051] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2579.798969] syz-executor.4: attempt to access beyond end of device
[ 2579.798969] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2579.801192] Buffer I/O error on dev loop4, logical block 10, lost async page write
22:31:19 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:31:19 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2579.886391] loop0: detected capacity change from 0 to 40
22:31:19 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:31:19 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2579.949852] loop5: detected capacity change from 0 to 40
[ 2579.968722] loop7: detected capacity change from 0 to 40
[ 2579.973997] loop3: detected capacity change from 0 to 40
22:31:19 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:31:19 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2580.084242] loop2: detected capacity change from 0 to 40
[ 2580.090400] syz-executor.7: attempt to access beyond end of device
[ 2580.090400] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2580.092125] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2580.097168] loop6: detected capacity change from 0 to 40
[ 2580.099196] syz-executor.0: attempt to access beyond end of device
[ 2580.099196] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2580.101064] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2580.135313] loop4: detected capacity change from 0 to 40
[ 2580.160255] syz-executor.3: attempt to access beyond end of device
[ 2580.160255] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2580.162265] Buffer I/O error on dev loop3, logical block 10, lost async page write
22:31:19 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:31:19 executing program 0:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:31:19 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:31:20 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:31:20 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2580.396094] loop7: detected capacity change from 0 to 40
[ 2580.471300] loop3: detected capacity change from 0 to 40
[ 2580.533118] loop5: detected capacity change from 0 to 40
22:31:37 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:31:37 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:31:37 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:31:37 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:31:37 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:31:37 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:31:37 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:31:37 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="5e2f7b696c653000cffa3564b020f53564a56e79b944ea7ef5ee81eb31bea1b606b4b073832268194001ec719badb0b168f828c49da2c0dff2c729b837293655372b66b092f45dc1d3ed85908307c4fd23ecdafaf16c9bf4da59cb200d76bc857f8efeb00161721be6bd4424c7951bbcf82e98a28f0864f6690597816fcc68fd537ed3ba5c904ab0632e1614d932459b7567947b46cef356f34f8565e0e295523381202ffaead07f6dd178d09a160e0b12c9f8eb36efe2aaec3ec10710c74bab5a7b3fc06c769f08cde92785fdda6dfc94420c83bf41137d9821a1f654600029c78dc237ad89ed6f7b97a13b83aeaba3e7f3623f594250809affb1746b23c3250527c34413ee82062a96e5b50b3729694ff13d6181292a478f935a4d3cb3694df02e96f301a4a5cf2d561ff04fe4ae46e64def4022a93f115aae95984e36ac57e7e7961c1c62c4a46c9a47332489a9174627723f01dc832997ca647adf94bc4212664705827dd5d33b64367ca3258d718570d48e4509e7220740c5ffe4425753e809ffff4c43c3f8fc50e253a39d125e2ef781ede8345bd1a3fc43059624818d38b3a2b508e640ee783830d89d1f5afe0fa65890fa934eca323831ce3772c2825d436ecd"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2597.879070] loop4: detected capacity change from 0 to 40
[ 2597.888486] loop2: detected capacity change from 0 to 40
[ 2597.893176] loop0: detected capacity change from 0 to 40
[ 2597.912818] loop5: detected capacity change from 0 to 40
[ 2597.941423] loop7: detected capacity change from 0 to 40
[ 2597.944082] loop3: detected capacity change from 0 to 40
[ 2597.947150] loop6: detected capacity change from 0 to 40
[ 2597.981273] bio_check_eod: 7 callbacks suppressed
[ 2597.981285] syz-executor.4: attempt to access beyond end of device
[ 2597.981285] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2597.983334] buffer_io_error: 7 callbacks suppressed
[ 2597.983343] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2597.991039] syz-executor.0: attempt to access beyond end of device
[ 2597.991039] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2597.992296] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2597.999711] syz-executor.2: attempt to access beyond end of device
[ 2597.999711] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2598.001035] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2598.064315] syz-executor.7: attempt to access beyond end of device
[ 2598.064315] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2598.066290] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2598.066639] syz-executor.5: attempt to access beyond end of device
[ 2598.066639] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2598.068797] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2598.115069] syz-executor.3: attempt to access beyond end of device
[ 2598.115069] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2598.117067] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2598.124960] syz-executor.6: attempt to access beyond end of device
[ 2598.124960] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2598.126980] Buffer I/O error on dev loop6, logical block 10, lost async page write
22:31:53 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:31:53 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2613.866220] loop2: detected capacity change from 0 to 40
22:31:53 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:31:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:31:53 executing program 0:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r1 = gettid()
migrate_pages(r1, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

22:31:53 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:31:53 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:31:53 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2613.887917] loop5: detected capacity change from 0 to 40
[ 2613.897902] loop4: detected capacity change from 0 to 40
[ 2613.926393] loop7: detected capacity change from 0 to 40
[ 2613.928383] loop6: detected capacity change from 0 to 40
[ 2613.930024] loop3: detected capacity change from 0 to 40
[ 2613.960630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11372 comm=syz-executor.0
[ 2613.964645] syz-executor.2: attempt to access beyond end of device
[ 2613.964645] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2613.965681] Buffer I/O error on dev loop2, logical block 10, lost async page write
22:31:53 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2614.031362] syz-executor.4: attempt to access beyond end of device
[ 2614.031362] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2614.032394] Buffer I/O error on dev loop4, logical block 10, lost async page write
22:31:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 2614.044049] syz-executor.5: attempt to access beyond end of device
[ 2614.044049] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2614.045108] Buffer I/O error on dev loop5, logical block 10, lost async page write
22:31:53 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2614.079950] syz-executor.6: attempt to access beyond end of device
[ 2614.079950] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2614.081828] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2614.088039] syz-executor.3: attempt to access beyond end of device
[ 2614.088039] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2614.089801] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2614.120155] loop0: detected capacity change from 0 to 40
22:31:53 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2614.143406] loop2: detected capacity change from 0 to 40
22:31:53 executing program 5:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r1 = gettid()
migrate_pages(r1, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

[ 2614.186277] syz-executor.7: attempt to access beyond end of device
[ 2614.186277] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2614.187727] Buffer I/O error on dev loop7, logical block 10, lost async page write
22:31:53 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:31:53 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2614.245979] loop4: detected capacity change from 0 to 40
[ 2614.280253] syz-executor.0: attempt to access beyond end of device
[ 2614.280253] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2614.281324] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2614.294279] loop6: detected capacity change from 0 to 40
22:31:53 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2614.311962] syz-executor.2: attempt to access beyond end of device
[ 2614.311962] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2614.314022] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2614.326952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11397 comm=syz-executor.5
22:31:53 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2614.345445] loop3: detected capacity change from 0 to 40
[ 2614.361824] syz-executor.4: attempt to access beyond end of device
[ 2614.361824] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2614.362835] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2614.387135] loop7: detected capacity change from 0 to 40
22:31:54 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:31:54 executing program 5:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r1 = gettid()
migrate_pages(r1, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r3, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

[ 2614.486189] loop0: detected capacity change from 0 to 40
22:31:54 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 2614.490068] syz-executor.6: attempt to access beyond end of device
[ 2614.490068] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2614.492026] Buffer I/O error on dev loop6, logical block 10, lost async page write
22:31:54 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2614.547064] loop4: detected capacity change from 0 to 40
[ 2614.588343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11413 comm=syz-executor.5
22:31:54 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:31:54 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:31:54 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2614.738202] loop3: detected capacity change from 0 to 40
[ 2614.894765] loop6: detected capacity change from 0 to 40
22:32:08 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:32:08 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:32:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:32:08 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:32:08 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:32:08 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2629.189504] loop0: detected capacity change from 0 to 40
[ 2629.207875] loop4: detected capacity change from 0 to 40
22:32:08 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:32:08 executing program 5:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2629.246767] loop6: detected capacity change from 0 to 40
[ 2629.249196] bio_check_eod: 6 callbacks suppressed
[ 2629.249209] syz-executor.4: attempt to access beyond end of device
[ 2629.249209] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2629.251143] buffer_io_error: 6 callbacks suppressed
[ 2629.251152] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2629.259353] loop3: detected capacity change from 0 to 40
[ 2629.283972] loop7: detected capacity change from 0 to 40
[ 2629.290369] loop2: detected capacity change from 0 to 40
22:32:09 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2629.391920] syz-executor.0: attempt to access beyond end of device
[ 2629.391920] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2629.394238] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2629.443403] syz-executor.6: attempt to access beyond end of device
[ 2629.443403] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2629.445382] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2629.469878] syz-executor.2: attempt to access beyond end of device
[ 2629.469878] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2629.471739] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2629.485037] syz-executor.3: attempt to access beyond end of device
[ 2629.485037] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2629.486977] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2629.539942] loop4: detected capacity change from 0 to 40
22:32:09 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:32:09 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2629.687306] syz-executor.7: attempt to access beyond end of device
[ 2629.687306] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2629.689339] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2629.732167] syz-executor.4: attempt to access beyond end of device
[ 2629.732167] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2629.733893] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2629.763842] loop0: detected capacity change from 0 to 40
[ 2629.880025] syz-executor.0: attempt to access beyond end of device
[ 2629.880025] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2629.881983] Buffer I/O error on dev loop0, logical block 10, lost async page write
22:32:23 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:32:23 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:32:23 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:32:23 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:32:23 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:32:23 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2644.155054] loop2: detected capacity change from 0 to 40
22:32:23 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2644.169250] loop6: detected capacity change from 0 to 40
[ 2644.182060] loop3: detected capacity change from 0 to 40
[ 2644.196704] loop7: detected capacity change from 0 to 40
[ 2644.214381] loop4: detected capacity change from 0 to 40
[ 2644.214725] syz-executor.2: attempt to access beyond end of device
[ 2644.214725] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2644.216189] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2644.224124] loop0: detected capacity change from 0 to 40
22:32:23 executing program 5:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r1 = gettid()
migrate_pages(r1, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r3, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

[ 2644.259979] syz-executor.7: attempt to access beyond end of device
[ 2644.259979] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2644.260994] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2644.269320] syz-executor.6: attempt to access beyond end of device
[ 2644.269320] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2644.270392] Buffer I/O error on dev loop6, logical block 10, lost async page write
22:32:23 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:32:23 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:32:24 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:32:24 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2644.372307] loop2: detected capacity change from 0 to 40
[ 2644.380826] syz-executor.3: attempt to access beyond end of device
[ 2644.380826] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2644.382708] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2644.413503] loop7: detected capacity change from 0 to 40
[ 2644.415015] loop6: detected capacity change from 0 to 40
[ 2644.438964] syz-executor.4: attempt to access beyond end of device
[ 2644.438964] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2644.440918] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2644.461781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11492 comm=syz-executor.5
[ 2644.470350] syz-executor.7: attempt to access beyond end of device
[ 2644.470350] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2644.471403] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2644.499132] syz-executor.0: attempt to access beyond end of device
[ 2644.499132] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2644.501061] Buffer I/O error on dev loop0, logical block 10, lost async page write
22:32:24 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="5e2f7b696c653000cffa3564b020f53564a56e79b944ea7ef5ee81eb31bea1b606b4b073832268194001ec719badb0b168f828c49da2c0dff2c729b837293655372b66b092f45dc1d3ed85908307c4fd23ecdafaf16c9bf4da59cb200d76bc857f8efeb00161721be6bd4424c7951bbcf82e98a28f0864f6690597816fcc68fd537ed3ba5c904ab0632e1614d932459b7567947b46cef356f34f8565e0e295523381202ffaead07f6dd178d09a160e0b12c9f8eb36efe2aaec3ec10710c74bab5a7b3fc06c769f08cde92785fdda6dfc94420c83bf41137d9821a1f654600029c78dc237ad89ed6f7b97a13b83aeaba3e7f3623f594250809affb1746b23c3250527c34413ee82062a96e5b50b3729694ff13d6181292a478f935a4d3cb3694df02e96f301a4a5cf2d561ff04fe4ae46e64def4022a93f115aae95984e36ac57e7e7961c1c62c4a46c9a47332489a9174627723f01dc832997ca647adf94bc4212664705827dd5d33b64367ca3258d718570d48e4509e7220740c5ffe4425753e809ffff4c43c3f8fc50e253a39d125e2ef781ede8345bd1a3fc43059624818d38b3a2b508e640ee783830d89d1f5afe0fa65890fa934eca323831ce3772c2825d436ecd"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2644.514282] syz-executor.6: attempt to access beyond end of device
[ 2644.514282] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2644.515391] Buffer I/O error on dev loop6, logical block 10, lost async page write
22:32:24 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:32:24 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2644.576092] syz-executor.2: attempt to access beyond end of device
[ 2644.576092] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2644.577962] Buffer I/O error on dev loop2, logical block 10, lost async page write
22:32:24 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2644.622012] loop7: detected capacity change from 0 to 40
[ 2644.635425] loop3: detected capacity change from 0 to 40
[ 2644.673380] syz-executor.7: attempt to access beyond end of device
[ 2644.673380] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2644.674436] Buffer I/O error on dev loop7, logical block 10, lost async page write
22:32:24 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:32:24 executing program 5:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r1 = gettid()
migrate_pages(r1, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r3, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

22:32:24 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2644.713985] loop6: detected capacity change from 0 to 40
[ 2644.740687] loop4: detected capacity change from 0 to 40
22:32:24 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:32:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:32:24 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2644.831577] loop2: detected capacity change from 0 to 40
[ 2644.847592] loop7: detected capacity change from 0 to 40
[ 2644.850349] loop0: detected capacity change from 0 to 40
[ 2644.868878] loop3: detected capacity change from 0 to 40
22:32:24 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2644.916813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11517 comm=syz-executor.5
[ 2645.027887] loop6: detected capacity change from 0 to 40
22:32:39 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:32:39 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:32:39 executing program 0:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0x0, r4, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
r6 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r6, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r4}, {0x2, 0x3}, {0x2, 0x7, r5}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r6}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x41030)

22:32:39 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:32:39 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:32:39 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:32:39 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:32:39 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 2660.140596] loop7: detected capacity change from 0 to 40
[ 2660.141627] loop3: detected capacity change from 0 to 40
[ 2660.173808] loop2: detected capacity change from 0 to 40
[ 2660.200789] loop5: detected capacity change from 0 to 40
[ 2660.213325] loop6: detected capacity change from 0 to 40
[ 2660.221215] loop4: detected capacity change from 0 to 40
[ 2660.225749] bio_check_eod: 8 callbacks suppressed
[ 2660.225760] syz-executor.7: attempt to access beyond end of device
[ 2660.225760] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2660.227305] buffer_io_error: 8 callbacks suppressed
[ 2660.227314] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2660.253066] syz-executor.3: attempt to access beyond end of device
[ 2660.253066] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2660.254196] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2660.263478] syz-executor.2: attempt to access beyond end of device
[ 2660.263478] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2660.264610] Buffer I/O error on dev loop2, logical block 10, lost async page write
22:32:39 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:32:39 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2660.323991] syz-executor.5: attempt to access beyond end of device
[ 2660.323991] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2660.325054] Buffer I/O error on dev loop5, logical block 10, lost async page write
22:32:39 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 2660.411691] loop7: detected capacity change from 0 to 40
[ 2660.418382] syz-executor.4: attempt to access beyond end of device
[ 2660.418382] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2660.420359] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2660.424964] loop2: detected capacity change from 0 to 40
[ 2660.427794] loop3: detected capacity change from 0 to 40
[ 2660.449266] syz-executor.6: attempt to access beyond end of device
[ 2660.449266] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2660.451053] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2660.552373] syz-executor.2: attempt to access beyond end of device
[ 2660.552373] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2660.554241] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2660.603966] syz-executor.7: attempt to access beyond end of device
[ 2660.603966] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2660.605800] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2660.652693] syz-executor.3: attempt to access beyond end of device
[ 2660.652693] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2660.654494] Buffer I/O error on dev loop3, logical block 10, lost async page write
22:32:54 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:32:54 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:32:54 executing program 5:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
clone3(&(0x7f00000023c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, 0x0, 0x0, &(0x7f0000002340)=""/10, &(0x7f0000002380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r3}}, 0x58)

22:32:54 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2674.804830] loop4: detected capacity change from 0 to 40
22:32:54 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:32:54 executing program 0:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:32:54 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:32:54 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592", 0x6}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 2674.826694] loop7: detected capacity change from 0 to 40
[ 2674.827393] loop3: detected capacity change from 0 to 40
[ 2674.831763] loop2: detected capacity change from 0 to 40
[ 2674.886363] loop6: detected capacity change from 0 to 40
[ 2674.912267] syz-executor.7: attempt to access beyond end of device
[ 2674.912267] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2674.913385] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2674.916801] syz-executor.2: attempt to access beyond end of device
[ 2674.916801] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2674.917852] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2674.925126] syz-executor.3: attempt to access beyond end of device
[ 2674.925126] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2674.926165] Buffer I/O error on dev loop3, logical block 10, lost async page write
22:32:54 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:32:54 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592", 0x6}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:32:54 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2675.008307] syz-executor.4: attempt to access beyond end of device
[ 2675.008307] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2675.010383] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2675.012210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11588 comm=syz-executor.5
[ 2675.059433] loop7: detected capacity change from 0 to 40
[ 2675.069046] loop3: detected capacity change from 0 to 40
[ 2675.075843] syz-executor.6: attempt to access beyond end of device
[ 2675.075843] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2675.076998] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2675.086358] loop2: detected capacity change from 0 to 40
[ 2675.133025] syz-executor.7: attempt to access beyond end of device
[ 2675.133025] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2675.134072] Buffer I/O error on dev loop7, logical block 10, lost async page write
22:32:54 executing program 5:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
clone3(&(0x7f00000023c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, 0x0, 0x0, &(0x7f0000002340)=""/10, &(0x7f0000002380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r3}}, 0x58)

22:32:54 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2675.171119] syz-executor.3: attempt to access beyond end of device
[ 2675.171119] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2675.172281] Buffer I/O error on dev loop3, logical block 10, lost async page write
22:32:54 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2675.198393] syz-executor.2: attempt to access beyond end of device
[ 2675.198393] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2675.199436] Buffer I/O error on dev loop2, logical block 10, lost async page write
22:32:54 executing program 0:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
clone3(&(0x7f00000023c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, 0x0, 0x0, &(0x7f0000002340)=""/10, &(0x7f0000002380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r3}}, 0x58)

22:32:54 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:32:54 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2675.220841] loop4: detected capacity change from 0 to 40
[ 2675.249886] loop6: detected capacity change from 0 to 40
[ 2675.296783] loop7: detected capacity change from 0 to 40
[ 2675.302242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11606 comm=syz-executor.5
[ 2675.309685] syz-executor.4: attempt to access beyond end of device
[ 2675.309685] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2675.310905] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2675.328315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11613 comm=syz-executor.0
[ 2675.336082] syz-executor.6: attempt to access beyond end of device
[ 2675.336082] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2675.337172] Buffer I/O error on dev loop6, logical block 10, lost async page write
22:33:09 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:33:09 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:33:09 executing program 0:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
clone3(&(0x7f00000023c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, 0x0, 0x0, &(0x7f0000002340)=""/10, &(0x7f0000002380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r3}}, 0x58)

22:33:09 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:33:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592", 0x6}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:33:09 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:33:09 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:33:09 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2689.552554] loop7: detected capacity change from 0 to 40
[ 2689.554761] loop4: detected capacity change from 0 to 40
[ 2689.581663] loop5: detected capacity change from 0 to 40
[ 2689.613548] loop2: detected capacity change from 0 to 40
[ 2689.614769] loop3: detected capacity change from 0 to 40
[ 2689.629885] loop6: detected capacity change from 0 to 40
[ 2689.635792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11632 comm=syz-executor.0
[ 2689.650405] bio_check_eod: 1 callbacks suppressed
[ 2689.650415] syz-executor.4: attempt to access beyond end of device
[ 2689.650415] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2689.652186] buffer_io_error: 1 callbacks suppressed
[ 2689.652195] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2689.707939] syz-executor.7: attempt to access beyond end of device
[ 2689.707939] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2689.710009] Buffer I/O error on dev loop7, logical block 10, lost async page write
22:33:09 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/11, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2689.740095] syz-executor.5: attempt to access beyond end of device
[ 2689.740095] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2689.741152] Buffer I/O error on dev loop5, logical block 10, lost async page write
22:33:09 executing program 0:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
clone3(&(0x7f00000023c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, 0x0, 0x0, &(0x7f0000002340)=""/10, &(0x7f0000002380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r3}}, 0x58)

[ 2689.760223] syz-executor.2: attempt to access beyond end of device
[ 2689.760223] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2689.761318] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2689.777755] syz-executor.6: attempt to access beyond end of device
[ 2689.777755] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2689.778923] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2689.781082] syz-executor.3: attempt to access beyond end of device
[ 2689.781082] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2689.783079] Buffer I/O error on dev loop3, logical block 10, lost async page write
22:33:09 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:33:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2", 0x9}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:33:09 executing program 5:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
clone3(&(0x7f00000023c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, 0x0, 0x0, &(0x7f0000002340)=""/10, &(0x7f0000002380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r3}}, 0x58)

[ 2689.844287] loop4: detected capacity change from 0 to 40
22:33:09 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:33:09 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:33:09 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2689.935988] syz-executor.4: attempt to access beyond end of device
[ 2689.935988] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2689.937099] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2689.949395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11649 comm=syz-executor.5
[ 2689.964259] loop2: detected capacity change from 0 to 40
[ 2689.972657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11651 comm=syz-executor.0
[ 2690.006222] loop7: detected capacity change from 0 to 40
[ 2690.018078] loop6: detected capacity change from 0 to 40
22:33:09 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:33:09 executing program 5:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
clone3(&(0x7f00000023c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, 0x0, 0x0, &(0x7f0000002340)=""/10, &(0x7f0000002380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r3}}, 0x58)

[ 2690.058404] loop3: detected capacity change from 0 to 40
[ 2690.090406] syz-executor.2: attempt to access beyond end of device
[ 2690.090406] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2690.091469] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2690.100851] syz-executor.7: attempt to access beyond end of device
[ 2690.100851] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2690.102267] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2690.121395] loop4: detected capacity change from 0 to 40
[ 2690.174743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11666 comm=syz-executor.5
[ 2690.183427] syz-executor.6: attempt to access beyond end of device
[ 2690.183427] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2690.184465] Buffer I/O error on dev loop6, logical block 10, lost async page write
22:33:26 executing program 0:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
clone3(&(0x7f00000023c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, 0x0, 0x0, &(0x7f0000002340)=""/10, &(0x7f0000002380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r3}}, 0x58)

22:33:26 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:33:26 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:33:26 executing program 5:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
clone3(&(0x7f00000023c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, 0x0, 0x0, &(0x7f0000002340)=""/10, &(0x7f0000002380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r3}}, 0x58)

22:33:26 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:33:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2", 0x9}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:33:26 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/11, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:33:26 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2707.165966] loop4: detected capacity change from 0 to 40
[ 2707.168253] loop7: detected capacity change from 0 to 40
[ 2707.185287] loop3: detected capacity change from 0 to 40
[ 2707.185357] loop6: detected capacity change from 0 to 40
[ 2707.198823] loop2: detected capacity change from 0 to 40
[ 2707.298042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11689 comm=syz-executor.5
[ 2707.302958] bio_check_eod: 2 callbacks suppressed
[ 2707.302977] syz-executor.7: attempt to access beyond end of device
[ 2707.302977] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2707.305705] buffer_io_error: 2 callbacks suppressed
[ 2707.305728] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2707.339663] syz-executor.4: attempt to access beyond end of device
[ 2707.339663] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2707.341352] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2707.368944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11688 comm=syz-executor.0
[ 2707.375386] syz-executor.6: attempt to access beyond end of device
[ 2707.375386] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2707.377281] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2707.406109] syz-executor.2: attempt to access beyond end of device
[ 2707.406109] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2707.407980] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2707.415297] syz-executor.3: attempt to access beyond end of device
[ 2707.415297] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2707.417179] Buffer I/O error on dev loop3, logical block 10, lost async page write
22:33:27 executing program 5:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
clone3(&(0x7f00000023c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, 0x0, 0x0, &(0x7f0000002340)=""/10, &(0x7f0000002380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r3}}, 0x58)

22:33:27 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:33:27 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2707.600810] loop7: detected capacity change from 0 to 40
[ 2707.637895] loop4: detected capacity change from 0 to 40
[ 2707.689374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11699 comm=syz-executor.5
[ 2707.713915] syz-executor.7: attempt to access beyond end of device
[ 2707.713915] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2707.715866] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2707.739475] syz-executor.4: attempt to access beyond end of device
[ 2707.739475] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2707.741426] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2723.599690] loop2: detected capacity change from 0 to 40
[ 2723.631367] loop3: detected capacity change from 0 to 40
22:33:43 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:33:43 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:33:43 executing program 5:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
clone3(&(0x7f00000023c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, 0x0, 0x0, &(0x7f0000002340)=""/10, &(0x7f0000002380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r3}}, 0x58)

22:33:43 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2", 0x9}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:33:43 executing program 0:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
clone3(&(0x7f00000023c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, 0x0, 0x0, &(0x7f0000002340)=""/10, &(0x7f0000002380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r3}}, 0x58)

22:33:43 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/11, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:33:43 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:33:43 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2723.663228] loop7: detected capacity change from 0 to 40
[ 2723.688492] loop4: detected capacity change from 0 to 40
[ 2723.691265] loop6: detected capacity change from 0 to 40
[ 2723.714008] syz-executor.2: attempt to access beyond end of device
[ 2723.714008] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2723.715441] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2723.720348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11723 comm=syz-executor.5
[ 2723.747244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11717 comm=syz-executor.0
[ 2723.749870] syz-executor.3: attempt to access beyond end of device
[ 2723.749870] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2723.751007] Buffer I/O error on dev loop3, logical block 10, lost async page write
22:33:43 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:33:43 executing program 5:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
clone3(&(0x7f00000023c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, 0x0, 0x0, &(0x7f0000002340)=""/10, &(0x7f0000002380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r3}}, 0x58)

22:33:43 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2723.849879] syz-executor.7: attempt to access beyond end of device
[ 2723.849879] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2723.851761] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2723.856187] syz-executor.4: attempt to access beyond end of device
[ 2723.856187] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2723.857477] Buffer I/O error on dev loop4, logical block 10, lost async page write
22:33:43 executing program 0:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
clone3(&(0x7f00000023c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, 0x0, 0x0, &(0x7f0000002340)=""/10, &(0x7f0000002380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r3}}, 0x58)

22:33:43 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97a", 0xb}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 2723.896327] syz-executor.6: attempt to access beyond end of device
[ 2723.896327] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2723.897294] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2723.916409] loop3: detected capacity change from 0 to 40
22:33:43 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:33:43 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2723.948289] loop2: detected capacity change from 0 to 40
[ 2723.949840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11735 comm=syz-executor.5
[ 2723.998226] loop4: detected capacity change from 0 to 40
22:33:43 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2724.003399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11741 comm=syz-executor.0
22:33:43 executing program 5:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
clone3(&(0x7f00000023c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, 0x0, 0x0, &(0x7f0000002340)=""/10, &(0x7f0000002380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r3}}, 0x58)

[ 2724.033217] loop7: detected capacity change from 0 to 40
[ 2724.035263] syz-executor.2: attempt to access beyond end of device
[ 2724.035263] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2724.036345] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2724.062066] syz-executor.3: attempt to access beyond end of device
[ 2724.062066] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2724.063238] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2724.071597] loop6: detected capacity change from 0 to 40
22:33:43 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2724.121857] syz-executor.7: attempt to access beyond end of device
[ 2724.121857] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2724.123020] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2724.153757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11754 comm=syz-executor.5
[ 2724.188295] syz-executor.6: attempt to access beyond end of device
[ 2724.188295] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2724.189341] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2724.233114] syz-executor.4: attempt to access beyond end of device
[ 2724.233114] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2724.234754] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2738.458407] loop3: detected capacity change from 0 to 40
[ 2738.481946] loop4: detected capacity change from 0 to 40
22:33:58 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:33:58 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:33:58 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97a", 0xb}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:33:58 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:33:58 executing program 0:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
clone3(&(0x7f00000023c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, 0x0, 0x0, &(0x7f0000002340)=""/10, &(0x7f0000002380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r3}}, 0x58)

22:33:58 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {0x0}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:33:58 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:33:58 executing program 5:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
clone3(&(0x7f00000023c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, 0x0, 0x0, &(0x7f0000002340)=""/10, &(0x7f0000002380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r3}}, 0x58)

[ 2738.526914] loop6: detected capacity change from 0 to 40
[ 2738.531130] loop2: detected capacity change from 0 to 40
[ 2738.533269] loop7: detected capacity change from 0 to 40
[ 2738.603693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11769 comm=syz-executor.0
[ 2738.605994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11774 comm=syz-executor.5
[ 2738.618745] syz-executor.3: attempt to access beyond end of device
[ 2738.618745] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2738.620687] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2738.717107] syz-executor.2: attempt to access beyond end of device
[ 2738.717107] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2738.719155] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2738.752253] syz-executor.6: attempt to access beyond end of device
[ 2738.752253] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2738.754499] Buffer I/O error on dev loop6, logical block 10, lost async page write
22:33:58 executing program 0:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r1 = gettid()
migrate_pages(r1, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r6=>r5, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r6, 0x400)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r7, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r3, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
clone3(&(0x7f00000023c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, 0x0, 0x0, &(0x7f0000002340)=""/10, &(0x7f0000002380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r4}}, 0x58)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

22:33:58 executing program 5:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x400)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
clone3(&(0x7f00000023c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, 0x0, 0x0, &(0x7f0000002340)=""/10, &(0x7f0000002380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r3}}, 0x58)

22:33:58 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:33:58 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97a", 0xb}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

22:33:58 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="5e2f7b696c653000cffa3564b020f53564a56e79b944ea7ef5ee81eb31bea1b606b4b073832268194001ec719badb0b168f828c49da2c0dff2c729b837293655372b66b092f45dc1d3ed85908307c4fd23ecdafaf16c9bf4da59cb200d76bc857f8efeb00161721be6bd4424c7951bbcf82e98a28f0864f6690597816fcc68fd537ed3ba5c904ab0632e1614d932459b7567947b46cef356f34f8565e0e295523381202ffaead07f6dd178d09a160e0b12c9f8eb36efe2aaec3ec10710c74bab5a7b3fc06c769f08cde92785fdda6dfc94420c83bf41137d9821a1f654600029c78dc237ad89ed6f7b97a13b83aeaba3e7f3623f594250809affb1746b23c3250527c34413ee82062a96e5b50b3729694ff13d6181292a478f935a4d3cb3694df02e96f301a4a5cf2d561ff04fe4ae46e64def4022a93f115aae95984e36ac57e7e7961c1c62c4a46c9a47332489a9174627723f01dc832997ca647adf94bc4212664705827dd5d33b64367ca3258d718570d48e4509e7220740c5ffe4425753e809ffff4c43c3f8fc50e253a39d125e2ef781ede8345bd1a3fc43059624818d38b3a2b508e640ee783830d89d1f5afe0fa65890fa934eca323831ce3772c2825d436ecd"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2738.918186] syz-executor.4: attempt to access beyond end of device
[ 2738.918186] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2738.920241] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2738.930205] loop2: detected capacity change from 0 to 40
22:33:58 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2739.002100] loop3: detected capacity change from 0 to 40
[ 2739.049179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11787 comm=syz-executor.0
[ 2739.093663] syz-executor.2: attempt to access beyond end of device
[ 2739.093663] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2739.095734] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2739.112292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11791 comm=syz-executor.5
22:33:58 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:33:58 executing program 0:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r1 = gettid()
migrate_pages(r1, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r6=>r5, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r6, 0x400)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r7, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008010)
pwritev(r3, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
clone3(&(0x7f00000023c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, 0x0, 0x0, &(0x7f0000002340)=""/10, &(0x7f0000002380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r4}}, 0x58)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

[ 2739.258181] loop6: detected capacity change from 0 to 40
22:33:58 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:33:58 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

[ 2739.323358] syz-executor.3: attempt to access beyond end of device
[ 2739.323358] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2739.325285] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2739.397609] loop4: detected capacity change from 0 to 40
[ 2739.458686] syz-executor.6: attempt to access beyond end of device
[ 2739.458686] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2739.460823] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2739.479192] loop2: detected capacity change from 0 to 40
[ 2739.485779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11801 comm=syz-executor.0
[ 2739.498429] loop5: detected capacity change from 0 to 40
[ 2739.671626] syz-executor.4: attempt to access beyond end of device
[ 2739.671626] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2739.673364] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2739.742242] syz-executor.5: attempt to access beyond end of device
[ 2739.742242] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2739.744756] Buffer I/O error on dev loop5, logical block 10, lost async page write
22:34:14 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2755.332424] loop4: detected capacity change from 0 to 40
[ 2755.336011] loop5: detected capacity change from 0 to 40
22:34:14 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:34:14 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:34:14 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:34:14 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:34:14 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:34:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

22:34:14 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {0x0}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2755.371268] loop2: detected capacity change from 0 to 40
[ 2755.379989] loop3: detected capacity change from 0 to 40
[ 2755.383838] loop6: detected capacity change from 0 to 40
[ 2755.392447] loop0: detected capacity change from 0 to 40
[ 2755.399008] loop7: detected capacity change from 0 to 40
[ 2755.517382] syz-executor.4: attempt to access beyond end of device
[ 2755.517382] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2755.519259] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2755.545103] syz-executor.6: attempt to access beyond end of device
[ 2755.545103] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2755.547135] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2755.559733] syz-executor.5: attempt to access beyond end of device
[ 2755.559733] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2755.561667] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2755.566048] syz-executor.7: attempt to access beyond end of device
[ 2755.566048] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2755.567963] Buffer I/O error on dev loop7, logical block 10, lost async page write
22:34:15 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

[ 2755.615684] syz-executor.3: attempt to access beyond end of device
[ 2755.615684] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2755.617740] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2755.658284] syz-executor.0: attempt to access beyond end of device
[ 2755.658284] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2755.660195] Buffer I/O error on dev loop0, logical block 10, lost async page write
22:34:15 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:34:15 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2755.716814] loop2: detected capacity change from 0 to 40
22:34:15 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {0x0}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:34:15 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:34:15 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:34:15 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:34:15 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2755.874912] loop4: detected capacity change from 0 to 40
[ 2755.877342] loop5: detected capacity change from 0 to 40
[ 2755.900720] loop6: detected capacity change from 0 to 40
[ 2755.917470] loop7: detected capacity change from 0 to 40
[ 2755.918812] loop3: detected capacity change from 0 to 40
[ 2755.953170] loop0: detected capacity change from 0 to 40
[ 2756.012869] syz-executor.4: attempt to access beyond end of device
[ 2756.012869] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2756.014715] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2756.050376] syz-executor.6: attempt to access beyond end of device
[ 2756.050376] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2756.052079] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2756.058408] syz-executor.5: attempt to access beyond end of device
[ 2756.058408] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2756.059932] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2756.092738] syz-executor.3: attempt to access beyond end of device
[ 2756.092738] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2756.094631] Buffer I/O error on dev loop3, logical block 10, lost async page write
22:34:29 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:34:29 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:34:29 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffdef)

22:34:29 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

22:34:29 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:34:29 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x0, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:34:29 executing program 5:
r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001) (fail_nth: 1)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r1, 0x400)
pwritev(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

[ 2769.792733] loop3: detected capacity change from 0 to 40
[ 2769.796903] loop6: detected capacity change from 0 to 40
22:34:29 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 1)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)

[ 2769.808490] loop7: detected capacity change from 0 to 40
[ 2769.816388] loop2: detected capacity change from 0 to 40
[ 2769.852874] bio_check_eod: 2 callbacks suppressed
[ 2769.852888] syz-executor.6: attempt to access beyond end of device
[ 2769.852888] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2769.854309] buffer_io_error: 2 callbacks suppressed
[ 2769.854317] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2769.890387] syz-executor.3: attempt to access beyond end of device
[ 2769.890387] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2769.891406] loop4: detected capacity change from 0 to 40
[ 2769.891732] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2769.911827] FAULT_INJECTION: forcing a failure.
[ 2769.911827] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 2769.913475] CPU: 1 PID: 11890 Comm: syz-executor.5 Not tainted 5.19.0-rc8-next-20220726 #1
[ 2769.914616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2769.916072] Call Trace:
[ 2769.916419]  <TASK>
[ 2769.916729]  dump_stack_lvl+0x8b/0xb3
[ 2769.917298]  should_fail.cold+0x5/0xa
[ 2769.917869]  _copy_from_user+0x2a/0x170
[ 2769.918440]  get_nodes+0x33f/0x3b0
[ 2769.918986]  ? mpol_set_nodemask.part.0+0x420/0x420
[ 2769.919697]  ? syscall_enter_from_user_mode+0x18/0x50
[ 2769.920505]  ? perf_trace_preemptirq_template+0xa2/0x420
[ 2769.921286]  kernel_migrate_pages+0x77/0x6c0
[ 2769.921945]  ? do_migrate_pages+0x470/0x470
[ 2769.922555]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2769.923310]  __x64_sys_migrate_pages+0x93/0x100
[ 2769.924003]  ? syscall_enter_from_user_mode+0x1d/0x50
22:34:29 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2769.924760]  do_syscall_64+0x3b/0x90
[ 2769.925509]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2769.926286] RIP: 0033:0x7fba6e4b2b19
[ 2769.926832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2769.929379] RSP: 002b:00007fba6ba07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000100
[ 2769.930415] RAX: ffffffffffffffda RBX: 00007fba6e5c6020 RCX: 00007fba6e4b2b19
[ 2769.931406] RDX: 0000000020000000 RSI: 0000000000000009 RDI: 0000000000000000
[ 2769.932377] RBP: 00007fba6ba071d0 R08: 0000000000000000 R09: 0000000000000000
[ 2769.933359] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001
[ 2769.934334] R13: 00007ffc6dde45ff R14: 00007fba6ba07300 R15: 0000000000022000
[ 2769.935342]  </TASK>
22:34:29 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 2)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)

22:34:29 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2769.989469] loop6: detected capacity change from 0 to 40
[ 2770.045826] syz-executor.6: attempt to access beyond end of device
[ 2770.045826] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2770.046862] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2770.048882] loop0: detected capacity change from 0 to 40
[ 2770.073227] syz-executor.4: attempt to access beyond end of device
[ 2770.073227] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2770.074308] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2770.091700] loop3: detected capacity change from 0 to 40
22:34:29 executing program 5:
r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001) (fail_nth: 2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r1, 0x400)
pwritev(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

[ 2770.093316] syz-executor.7: attempt to access beyond end of device
[ 2770.093316] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2770.095298] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2770.210695] syz-executor.3: attempt to access beyond end of device
[ 2770.210695] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2770.211830] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2770.226471] FAULT_INJECTION: forcing a failure.
[ 2770.226471] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2770.228969] CPU: 1 PID: 11902 Comm: syz-executor.5 Not tainted 5.19.0-rc8-next-20220726 #1
[ 2770.230021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2770.231421] Call Trace:
[ 2770.231756]  <TASK>
[ 2770.232055]  dump_stack_lvl+0x8b/0xb3
[ 2770.232576]  should_fail.cold+0x5/0xa
[ 2770.233088]  _copy_from_user+0x2a/0x170
[ 2770.233614]  get_nodes+0x33f/0x3b0
[ 2770.234088]  ? mpol_set_nodemask.part.0+0x420/0x420
[ 2770.234746]  ? syscall_enter_from_user_mode+0x18/0x50
[ 2770.235431]  ? perf_trace_preemptirq_template+0xa2/0x420
[ 2770.236146]  kernel_migrate_pages+0xdc/0x6c0
[ 2770.236729]  ? do_migrate_pages+0x470/0x470
[ 2770.237303]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2770.237985]  __x64_sys_migrate_pages+0x93/0x100
[ 2770.238595]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2770.239246]  do_syscall_64+0x3b/0x90
[ 2770.239770]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2770.240433] RIP: 0033:0x7fba6e4b2b19
[ 2770.240914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2770.243186] RSP: 002b:00007fba6ba28188 EFLAGS: 00000246 ORIG_RAX: 0000000000000100
[ 2770.244168] RAX: ffffffffffffffda RBX: 00007fba6e5c5f60 RCX: 00007fba6e4b2b19
[ 2770.245075] RDX: 0000000020000000 RSI: 0000000000000009 RDI: 0000000000000000
[ 2770.245976] RBP: 00007fba6ba281d0 R08: 0000000000000000 R09: 0000000000000000
[ 2770.246873] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001
[ 2770.247800] R13: 00007ffc6dde45ff R14: 00007fba6ba28300 R15: 0000000000022000
[ 2770.248728]  </TASK>
22:34:46 executing program 5:
r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001) (fail_nth: 3)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r1, 0x400)
pwritev(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

[ 2787.222008] loop2: detected capacity change from 0 to 40
22:34:46 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:34:46 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:34:46 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffdef)

22:34:46 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x0, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

22:34:46 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:34:46 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 3)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)

22:34:46 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2787.244679] FAULT_INJECTION: forcing a failure.
[ 2787.244679] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2787.246768] CPU: 0 PID: 11920 Comm: syz-executor.0 Not tainted 5.19.0-rc8-next-20220726 #1
[ 2787.248313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2787.250237] Call Trace:
[ 2787.250592]  <TASK>
[ 2787.250912]  dump_stack_lvl+0x8b/0xb3
[ 2787.251462]  should_fail.cold+0x5/0xa
[ 2787.252019]  _copy_from_user+0x2a/0x170
[ 2787.252562]  __do_sys_memfd_create+0x103/0x4e0
[ 2787.253203]  do_syscall_64+0x3b/0x90
[ 2787.253726]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2787.254423] RIP: 0033:0x7fdf0e58fb19
[ 2787.254955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2787.257438] RSP: 002b:00007fdf0bb04f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2787.258478] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fdf0e58fb19
[ 2787.259439] RDX: 0000000000005000 RSI: 0000000000000000 RDI: 00007fdf0e5e90fb
[ 2787.260459] RBP: 0000000000000002 R08: 0000000000002800 R09: ffffffffffffffff
[ 2787.261422] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000
[ 2787.262366] R13: 0000000020000240 R14: 0000000000005000 R15: 0000000020000140
[ 2787.263352]  </TASK>
[ 2787.291205] loop6: detected capacity change from 0 to 40
[ 2787.296467] loop3: detected capacity change from 0 to 40
[ 2787.299768] loop7: detected capacity change from 0 to 40
[ 2787.303217] loop4: detected capacity change from 0 to 40
22:34:47 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffdef)

[ 2787.418801] syz-executor.7: attempt to access beyond end of device
[ 2787.418801] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2787.420774] Buffer I/O error on dev loop7, logical block 10, lost async page write
22:34:47 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 4)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)

[ 2787.490054] syz-executor.3: attempt to access beyond end of device
[ 2787.490054] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2787.491782] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2787.522194] FAULT_INJECTION: forcing a failure.
[ 2787.522194] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2787.524403] CPU: 0 PID: 11919 Comm: syz-executor.5 Not tainted 5.19.0-rc8-next-20220726 #1
[ 2787.525510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2787.526990] Call Trace:
[ 2787.527350]  <TASK>
[ 2787.527686]  dump_stack_lvl+0x8b/0xb3
[ 2787.528234]  should_fail.cold+0x5/0xa
[ 2787.528770]  _copy_to_user+0x2a/0x140
[ 2787.529307]  simple_read_from_buffer+0xcc/0x160
[ 2787.529946]  proc_fail_nth_read+0x198/0x230
[ 2787.530552]  ? proc_fault_inject_read+0x230/0x230
[ 2787.531207]  ? security_file_permission+0xb1/0xe0
[ 2787.531886]  vfs_read+0x253/0x930
[ 2787.532388]  ? proc_fault_inject_read+0x230/0x230
[ 2787.533056]  ? kernel_read+0x1c0/0x1c0
[ 2787.533613]  ? __fget_files+0x270/0x450
[ 2787.534197]  ksys_read+0x127/0x250
[ 2787.534711]  ? __ia32_sys_pwrite64+0x220/0x220
[ 2787.535348]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2787.536061]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2787.536769]  do_syscall_64+0x3b/0x90
[ 2787.537310]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2787.538016] RIP: 0033:0x7fba6e46569c
22:34:47 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x0, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2787.538534] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2787.541224] RSP: 002b:00007fba6ba28170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2787.542242] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fba6e46569c
[ 2787.543175] RDX: 000000000000000f RSI: 00007fba6ba281e0 RDI: 0000000000000004
[ 2787.544110] RBP: 00007fba6ba281d0 R08: 0000000000000000 R09: 0000000000000000
[ 2787.545047] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001
[ 2787.545978] R13: 00007ffc6dde45ff R14: 00007fba6ba28300 R15: 0000000000022000
[ 2787.546944]  </TASK>
[ 2787.566853] syz-executor.4: attempt to access beyond end of device
[ 2787.566853] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2787.568682] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2787.601109] loop2: detected capacity change from 0 to 40
22:34:47 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2787.675471] syz-executor.6: attempt to access beyond end of device
[ 2787.675471] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2787.677999] Buffer I/O error on dev loop6, logical block 10, lost async page write
22:34:47 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2787.719374] loop7: detected capacity change from 0 to 40
22:34:47 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 5)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)

22:34:47 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

22:34:47 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f0000000100)='6', 0x1}, {&(0x7f00000002c0)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0x0)

[ 2787.873982] loop0: detected capacity change from 0 to 40
[ 2787.882208] syz-executor.7: attempt to access beyond end of device
[ 2787.882208] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2787.884026] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2787.896858] loop3: detected capacity change from 0 to 40
[ 2787.901183] loop4: detected capacity change from 0 to 40
22:34:47 executing program 5:
r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x6}}, './file1\x00'})
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r1, 0x400)
pwritev(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)

22:34:47 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xe7ffc000)
close(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r4 = syz_io_uring_setup(0x50ec, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xf1a, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

22:34:47 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xe7ffc000)
close(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="018778354548b4b85a000000180000008223", @ANYRES32, @ANYBLOB="00000000000000005e4d57d9cf66696ccd543bdec449694c75ebcdafa5a5d3d5796dbb7e39f1d32f8355858af2d25908662473a3daef088b4e5f66dd581b8eb2330dee77da4be874bfdfa1ecde1680af954ccf3b5c053cd649c7082700b8cb2ba452ba982bd17f01ae8e91b0331d7e6e1592683905732fdf649e0b08d54b8afbde6bd8c989fc00ada1772005120edf9a4cc3165b9b073be28727492f9fdcabb2babf336701e86befd37c4dae976dcf592908f00f4917210dcb5df8a760e5dccf0b9900000000000100000000000000881bfe07cf820f88127d22d580e51e6c17c3757f42bb7a8b3f72a93129f9d936d8f1e8e72c0995b725"])
r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x32d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0), 0x0, r3)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xc}, {&(0x7f00000002c0)='\x00', 0x1}], 0x2, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2788.003593] loop2: detected capacity change from 0 to 40
[ 2788.007998] loop6: detected capacity change from 0 to 40
22:34:47 executing program 1:
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
r7 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB='X\x00'/12, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="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"])
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {}, [{0x2, 0x3, r5}, {0x2, 0x3}, {0x2, 0x7, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}}, 0x7c, 0x3)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
write(r4, &(0x7f0000000080)="01", 0x41030)

[ 2788.060734] syz-executor.4: attempt to access beyond end of device
[ 2788.060734] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2788.062621] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2788.066843] syz-executor.3: attempt to access beyond end of device
[ 2788.066843] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2788.068770] Buffer I/O error on dev loop3, logical block 10, lost async page write
22:34:47 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 6)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)

[ 2788.183186] loop7: detected capacity change from 0 to 40
[ 2788.382059] syz-executor.7: attempt to access beyond end of device
[ 2788.382059] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2788.383975] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2788.418096] syz-executor.6: attempt to access beyond end of device
[ 2788.418096] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2788.420124] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2789.130927] ==================================================================
[ 2789.131955] BUG: KASAN: use-after-free in __lock_acquire+0x42c9/0x5e70
[ 2789.132835] Read of size 8 at addr ffff88800e8acd98 by task syz-executor/11964
[ 2789.133772] 
[ 2789.134006] CPU: 1 PID: 11964 Comm: syz-executor Not tainted 5.19.0-rc8-next-20220726 #1
[ 2789.135043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2789.136493] Call Trace:
[ 2789.136832]  <TASK>
[ 2789.137133]  dump_stack_lvl+0x8b/0xb3
[ 2789.137659]  print_report.cold+0x5e/0x5e5
[ 2789.138220]  ? __lock_acquire+0x42c9/0x5e70
[ 2789.138805]  kasan_report+0xb1/0x1c0
[ 2789.139311]  ? __lock_acquire+0x42c9/0x5e70
[ 2789.139895]  __lock_acquire+0x42c9/0x5e70
[ 2789.140456]  ? lock_chain_count+0x20/0x20
[ 2789.141033]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2789.141765]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2789.142486]  ? finish_task_switch.isra.0+0x22d/0x8a0
[ 2789.143195]  lock_acquire+0x1a2/0x530
[ 2789.143740]  ? kmemleak_scan+0x21d/0x16f0
[ 2789.144327]  ? lock_release+0x750/0x750
[ 2789.145121]  ? rcu_read_lock_sched_held+0x3e/0x80
[ 2789.146195]  ? trace_rcu_dyntick+0x1a7/0x250
[ 2789.147173]  ? ct_nmi_exit+0x119/0x1c0
[ 2789.147723]  _raw_spin_lock_irq+0x32/0x50
[ 2789.148284]  ? kmemleak_scan+0x21d/0x16f0
[ 2789.148863]  kmemleak_scan+0x21d/0x16f0
[ 2789.149422]  ? paint_ptr+0xc0/0xc0
[ 2789.149931]  ? strncpy_from_user+0x204/0x3e0
[ 2789.150547]  kmemleak_write+0x570/0x680
[ 2789.151148]  ? kmemleak_scan+0x16f0/0x16f0
[ 2789.151755]  ? debugfs_file_get+0x1ce/0x450
[ 2789.152355]  ? debugfs_file_put+0xd0/0xd0
[ 2789.152947]  full_proxy_write+0x11d/0x190
[ 2789.153532]  vfs_write+0x2cb/0xd90
[ 2789.154030]  ? full_proxy_poll+0x180/0x180
[ 2789.154619]  ? __ia32_sys_pread64+0x220/0x220
[ 2789.155245]  ? lock_release+0x3b2/0x750
[ 2789.155827]  ? syscall_enter_from_user_mode+0x18/0x50
[ 2789.156523]  ? perf_trace_preemptirq_template+0xa2/0x420
[ 2789.157262]  ? __fget_light+0x212/0x280
[ 2789.157807]  ksys_write+0x127/0x250
[ 2789.158319]  ? __ia32_sys_read+0xb0/0xb0
[ 2789.158890]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2789.159601]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2789.160311]  do_syscall_64+0x3b/0x90
[ 2789.160838]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2789.161544] RIP: 0033:0x7fb42d5bc5c3
[ 2789.162069] Code: 16 00 00 00 eb ae 90 b8 6e 00 00 00 eb a6 e8 44 ef 04 00 0f 1f 40 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18
[ 2789.164514] RSP: 002b:00007fff7c355da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2789.165524] RAX: ffffffffffffffda RBX: 00007fff7c3563e8 RCX: 00007fb42d5bc5c3
[ 2789.166465] RDX: 0000000000000004 RSI: 00007fb42d672ed9 RDI: 0000000000000003
[ 2789.167413] RBP: 0000000000000002 R08: 0000000000000ae4 R09: 00007fff7c392080
[ 2789.168393] R10: 00007fff7c392090 R11: 0000000000000246 R12: 00000000fffffff6
[ 2789.169365] R13: 00007fff7c357ef1 R14: 0000000000000000 R15: 00000000002a8bd9
[ 2789.170347]  </TASK>
[ 2789.170676] 
[ 2789.170920] Allocated by task 11966:
[ 2789.171400]  kasan_save_stack+0x1e/0x40
[ 2789.171944]  __kasan_slab_alloc+0x66/0x80
[ 2789.172486]  kmem_cache_alloc+0x1b1/0x4a0
[ 2789.173031]  __create_object.isra.0+0x3d/0xc10
[ 2789.173639]  __kmalloc_track_caller+0x275/0x450
[ 2789.174249]  kmemdup+0x23/0x50
[ 2789.174688]  shmem_symlink+0x185/0x7f0
[ 2789.175210]  vfs_symlink+0x364/0x5b0
[ 2789.175719]  do_symlinkat+0x144/0x2a0
[ 2789.176250]  __x64_sys_symlink+0x75/0x90
[ 2789.176803]  do_syscall_64+0x3b/0x90
[ 2789.177317]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2789.178016] 
[ 2789.178246] Freed by task 13:
[ 2789.178659]  kasan_save_stack+0x1e/0x40
[ 2789.179190]  kasan_set_track+0x21/0x30
[ 2789.179725]  kasan_set_free_info+0x20/0x40
[ 2789.180296]  __kasan_slab_free+0x108/0x190
[ 2789.180864]  kmem_cache_free+0xfb/0x610
[ 2789.181398]  rcu_core+0x7e2/0x2080
[ 2789.181883]  __do_softirq+0x1c8/0x8d0
[ 2789.182401] 
[ 2789.182637] Last potentially related work creation:
[ 2789.183280]  kasan_save_stack+0x1e/0x40
[ 2789.183823]  __kasan_record_aux_stack+0x97/0xb0
[ 2789.184466]  call_rcu+0x6a/0xa30
[ 2789.184945]  kfree+0xbb/0x5e0
[ 2789.185384]  shmem_free_in_core_inode+0x8b/0xa0
[ 2789.186036]  i_callback+0x42/0x70
[ 2789.186528]  rcu_core+0x7e2/0x2080
[ 2789.187028]  __do_softirq+0x1c8/0x8d0
[ 2789.187577] 
[ 2789.187819] Second to last potentially related work creation:
[ 2789.188614]  kasan_save_stack+0x1e/0x40
[ 2789.189168]  __kasan_record_aux_stack+0x97/0xb0
[ 2789.189820]  call_rcu+0x6a/0xa30
[ 2789.190295]  kmem_cache_free_bulk.part.0+0x305/0x840
[ 2789.191001]  kfree_rcu_work+0x3fa/0xbd0
[ 2789.191560]  process_one_work+0xa0f/0x1690
[ 2789.192154]  worker_thread+0x637/0x1260
[ 2789.192716]  kthread+0x2ed/0x3a0
[ 2789.193201]  ret_from_fork+0x22/0x30
[ 2789.193727] 
[ 2789.193965] The buggy address belongs to the object at ffff88800e8acd80
[ 2789.193965]  which belongs to the cache kmemleak_object of size 368
[ 2789.195661] The buggy address is located 24 bytes inside of
[ 2789.195661]  368-byte region [ffff88800e8acd80, ffff88800e8acef0)
[ 2789.197192] 
[ 2789.197426] The buggy address belongs to the physical page:
[ 2789.198148] page:0000000074c2cba9 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xe8ac
[ 2789.199352] head:0000000074c2cba9 order:1 compound_mapcount:0 compound_pincount:0
[ 2789.200320] flags: 0x100000000010200(slab|head|node=0|zone=1)
[ 2789.201089] raw: 0100000000010200 ffffea00005c4780 dead000000000002 ffff888007c4f780
[ 2789.202097] raw: 0000000000000000 0000000000120012 00000001ffffffff 0000000000000000
[ 2789.203117] page dumped because: kasan: bad access detected
[ 2789.203882] 
[ 2789.204120] Memory state around the buggy address:
[ 2789.204776]  ffff88800e8acc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 2789.205770]  ffff88800e8acd00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[ 2789.206754] >ffff88800e8acd80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2789.207744]                             ^
[ 2789.208304]  ffff88800e8ace00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2789.209281]  ffff88800e8ace80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc
[ 2789.210261] ==================================================================
[ 2789.211206] Disabling lock debugging due to kernel taint

VM DIAGNOSIS:
22:34:49  Registers:
info registers vcpu 0
RAX=ffffffff84234e20 RBX=ffffffff85232900 RCX=ffffffff84216c92 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffffff85207e18
R8 =0000000000000001 R9 =ffff88806ce33b53 R10=ffffed100d9c676a R11=0000000000000001
R12=fffffbfff0a46520 R13=ffffffff85af2510 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff84234e2b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd84951ff0 CR3=000000000e9cc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff4ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 0000001100000007 000055e4cc0407a0
YMM02=0000000000000000 0000000000000000 ffffff0f0e0d0c0b 0a09080706050403
YMM03=0000000000000000 0000000000000000 696e656420737365 636341002f737973
YMM04=0000000000000000 0000000000000000 4d00393035373838 38323d44455a494c
YMM05=0000000000000000 0000000000000000 3d4d554e51455300 333d5145534b5349
YMM06=0000000000000000 0000000000000000 706f6f6c2f766564 2f3d454d414e5645
YMM07=0000000000000000 0000000000000000 5f4b534944006b63 6f6c623d4d455453
YMM08=0000000000000000 0000000000000000 49006d756e203c20 69000a313a56000a
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff8243e7ec RDI=ffffffff876326c0 RBP=ffffffff87632680 RSP=ffff888046d1f270
R8 =0000000000000001 R9 =ffff888046d1f1fb R10=ffffed1008da3e3f R11=0000000000000001
R12=0000000000000030 R13=ffffffff87632680 R14=ffffffff87632910 R15=ffffffff876326d0
RIP=ffffffff8243e841 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555571c3400 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd8e80b6ae0 CR3=000000003c780000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff4ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 ff0000000000ff00 000000ff000000ff
YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
YMM05=0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000006561 6124242f6867632f
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 2064616572206f74 2064656c69614600
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000